Aveva Plant Scada vulnerabilities

2 CVEs affecting Aveva Plant Scada, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-34982, published 2023-11-15.

More from Aveva.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-33873, published 2023-11-15. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. This privilege escalation vulnerability, if exploited, cloud allow a local OS-authenticated user with standard privileges to escalate to System privilege on the machine where these products are…
• CVE-2023-34982, published 2023-11-15. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where these products are…