Multiple vulnerabilities in AVEVA Operations Control Logger
| Risk | Low |
| Patch available | YES |
| Number of vulnerabilities | 2 |
| CVE-ID | CVE-2023-33873 CVE-2023-34982 |
| CWE-ID | CWE-250 CWE-73 |
| Exploitation vector | Local |
| Public exploit | N/A |
| Vulnerable software |
AVEVA SystemPlatform Other software / Other software solutions AVEVA Application Server Other software / Other software solutions AVEVA Enterprise Licensing Other software / Other software solutions AVEVA Recipe Management Other software / Other software solutions AVEVA Worktasks Other software / Other software solutions AVEVA Plant SCADA Other software / Other software solutions AVEVA Telemetry Server Other software / Other software solutions AVEVA Operations Control Logger Other software / Other software solutions AVEVA Historian Server applications / Other server solutions AVEVA InTouch Server applications / Other server solutions AVEVA Manufacturing Execution System Server applications / Other server solutions AVEVA Batch Management Server applications / Other server solutions AVEVA Mobile Operator Server applications / Other server solutions AVEVA Communication Drivers Pack Server applications / Other server solutions AVEVA Edge Server applications / SCADA systems |
| Vendor | AVEVA Software, LLC. |
Security Bulletin
This security bulletin contains information about 2 vulnerabilities.
1) Execution with unnecessary privileges
EUVDB-ID: #VU83208
Risk: Low
CVSSv4.0: [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2023-33873
CWE-ID:
CWE-250 - Execution with Unnecessary Privileges
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to application binary has a setuid bit. A local low-privileged user can run the affected binary and execute arbitrary code on the system with root privileges.
MitigationInstall updates from vendor's website.
Vulnerable software versionsAVEVA SystemPlatform: 2020 R2 SP1 P01
AVEVA Historian: 2020 R2 SP1 P01
AVEVA Application Server: 2020 R2 SP1 P01
AVEVA InTouch: 2020 R2 SP1 P01
AVEVA Enterprise Licensing: 3.7.002
AVEVA Manufacturing Execution System: 2020 P01
AVEVA Recipe Management: 2020 R2 Update 1 Patch 2
AVEVA Batch Management: 2020 SP1
AVEVA Edge: 2020 R2 SP1 P01
AVEVA Worktasks: 2020 U2
AVEVA Plant SCADA: 2020 R2 Update 15
AVEVA Mobile Operator: 2020 R1
AVEVA Communication Drivers Pack: 2020 R2 SP1
AVEVA Telemetry Server: 2020 R2 SP1
AVEVA Operations Control Logger: before 22.1
CPE2.3- cpe:2.3:a:aveva_software:aveva_systemplatform:*:*:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:aveva_systemplatform:2020:R2 SP1 P01:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:aveva_historian:*:*:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:aveva_historian:2020:R2 SP1 P01:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:aveva_application_server:*:*:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:aveva_application_server:2020:R2 SP1 P01:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:aveva_intouch:*:*:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:aveva_intouch:2020:R2 SP1 P01:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:aveva_enterprise_licensing:*:*:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:aveva_enterprise_licensing:3.7.002:*:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:aveva_manufacturing_execution_system:*:*:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:aveva_recipe_management:*:*:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:aveva_batch_management:*:*:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:indusoft_web_studio:*:*:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:aveva_worktasks:*:*:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:aveva_plant_scada:*:*:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:aveva_mobile_operator:*:*:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:aveva_communication_drivers_pack:*:*:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:aveva_telemetry_server:*:*:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:ArchestrA Logger:*:*:*:*:*:*:*:*
http://www.cisa.gov/news-events/ics-advisories/icsa-23-318-01
http://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AV...
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) External Control of File Name or Path
EUVDB-ID: #VU83209
Risk: Low
CVSSv4.0: [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2023-34982
CWE-ID:
CWE-73 - External Control of File Name or Path
Exploit availability: No
DescriptionThe vulnerability allows a local user to delete arbitrary files.
The vulnerability exists due to application allows an attacker to control path of the files to delete. A local user can send a specially crafted HTTP request and delete arbitrary files on the system, leading to denial of service (DoS) condition.
MitigationInstall updates from vendor's website.
Vulnerable software versionsAVEVA SystemPlatform: 2020 R2 SP1 P01
AVEVA Historian: 2020 R2 SP1 P01
AVEVA Application Server: 2020 R2 SP1 P01
AVEVA InTouch: 2020 R2 SP1 P01
AVEVA Enterprise Licensing: 3.7.002
AVEVA Manufacturing Execution System: 2020 P01
AVEVA Recipe Management: 2020 R2 Update 1 Patch 2
AVEVA Batch Management: 2020 SP1
AVEVA Edge: 2020 R2 SP1 P01
AVEVA Worktasks: 2020 U2
AVEVA Plant SCADA: 2020 R2 Update 15
AVEVA Mobile Operator: 2020 R1
AVEVA Communication Drivers Pack: 2020 R2 SP1
AVEVA Telemetry Server: 2020 R2 SP1
AVEVA Operations Control Logger: before 22.1
CPE2.3- cpe:2.3:a:aveva_software:aveva_systemplatform:*:*:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:aveva_systemplatform:2020:R2 SP1 P01:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:aveva_historian:*:*:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:aveva_historian:2020:R2 SP1 P01:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:aveva_application_server:*:*:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:aveva_application_server:2020:R2 SP1 P01:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:aveva_intouch:*:*:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:aveva_intouch:2020:R2 SP1 P01:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:aveva_enterprise_licensing:*:*:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:aveva_enterprise_licensing:3.7.002:*:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:aveva_manufacturing_execution_system:*:*:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:aveva_recipe_management:*:*:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:aveva_batch_management:*:*:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:indusoft_web_studio:*:*:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:aveva_worktasks:*:*:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:aveva_plant_scada:*:*:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:aveva_mobile_operator:*:*:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:aveva_communication_drivers_pack:*:*:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:aveva_telemetry_server:*:*:*:*:*:*:*:*
- cpe:2.3:a:aveva_software:ArchestrA Logger:*:*:*:*:*:*:*:*
http://www.cisa.gov/news-events/ics-advisories/icsa-23-318-01
http://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AV...
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
