Aveva Intouch vulnerabilities

3 CVEs affecting Aveva Intouch, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-7113, published 2024-08-13.

More from Aveva.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-7113, published 2024-08-13. High severity, CVSS 8.7. EPSS: 0.5% chance of exploitation in the next 30 days. If exploited, this vulnerability could cause a SuiteLink server to consume excessive system resources and slow down processing of Data I/O for the duration of the attack.
• CVE-2023-33873, published 2023-11-15. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. This privilege escalation vulnerability, if exploited, cloud allow a local OS-authenticated user with standard privileges to escalate to System privilege on the machine where these products are…
• CVE-2023-34982, published 2023-11-15. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where these products are…