CVE-2023-6132

🗓️ 29 Feb 2024 17:40:05Reported by icscertType

The vulnerability allows arbitrary code execution and privilege escalation by tricking AVEVA Edge to load an unsafe DLL

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2023-6132	24 Feb 202410:41	–	circl
CNNVD	AVEVA Edge Code Issue Vulnerability	2 Feb 202400:00	–	cnnvd
Cvelist	CVE-2023-6132 AVEVA Edge products Uncontrolled Search Path Element	29 Feb 202417:40	–	cvelist
EUVD	EUVD-2023-58387	3 Oct 202520:07	–	euvd
ICS	AVEVA Edge products (formerly known as InduSoft Web Studio)	1 Feb 202407:00	–	ics
NVD	CVE-2023-6132	29 Feb 202418:15	–	nvd
Prion	Privilege escalation	29 Feb 202418:15	–	prion
Positive Technologies	PT-2024-1469 · Aveva · Aveva Edge	31 Jan 202400:00	–	ptsecurity
RedhatCVE	CVE-2023-6132	23 May 202504:58	–	redhatcve
Vulnrichment	CVE-2023-6132 AVEVA Edge products Uncontrolled Search Path Element	29 Feb 202417:40	–	vulnrichment

NVD

Vulners

Vulnrichment

Node

aveva platform_common_servicesMatch4.4.6

aveva platform_common_servicesMatch4.5.0

aveva platform_common_servicesMatch4.5.1

aveva platform_common_servicesMatch4.5.2

AND

aveva batch_managementMatch2020

aveva enterprise_data_managementMatch2021

aveva manufacturing_execution_systemMatch2020

aveva mobile_operatorMatch2020-

aveva system_platformMatch2020-

aveva system_platformMatch2020r2

aveva system_platformMatch2020r2_p01

aveva work_tasksMatch2020-

aveva work_tasksMatch2020update_1

[
  {
    "defaultStatus": "unaffected",
    "product": "AVEVA Edge",
    "vendor": "AVEVA",
    "versions": [
      {
        "lessThanOrEqual": "2020 R2 SP2",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
aveva	www.aveva.com/en/support-and-success/cyber-security-updates/
cisa	www.cisa.gov/news-events/ics-advisories/icsa-24-032-03

04 Mar 2025 12:38Current

7.7High risk

Vulners AI Score7.7

CVSS 3.17.3 - 7.8

EPSS0.00039

SSVC

CWE-427