CVE-2023-1256

State: Published
Severity: 9.8 Critical
Published: Mar 16, 2023
Updated: Jan 16, 2025
Reserved: Mar 7, 2023

Description

The listed versions of AVEVA Plant SCADA and AVEVA Telemetry Server are vulnerable to an improper authorization exploit which could allow an unauthenticated user to remotely read data, cause denial of service, and tamper with alarm states.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	icscert

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
AVEVA Plant SCADAAVEVA	2023 Update 10Affected
AVEVA Plant SCADAAVEVA	2020R2 Update 10Affected
AVEVA Telemetry ServerAVEVA	2020 R2 SP1Affected

References

https://www.cisa.gov/news-events/ics-advisories/icsa-23-073-04

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.