AVEVA PI Asset Framework Client

ics🔗 www.cisa.gov👁 32 Views

AVEVA PI Asset Framework Client vulnerability in Deserialization of Untrusted Data, allowing malicious code execution in PI System Explorer

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of the AVEVA PI Asset Framework (AF) Client application for managing production process data, related to the recovery of unreliable data in memory, allows a attacker to execute arbitrary code.	21 Jun 202400:00	–	bdu_fstec
CNNVD	Osisoft PI Asset Framework Code Issue Vulnerability	12 Jun 202400:00	–	cnnvd
CVE	CVE-2024-3467	12 Jun 202421:04	–	cve
Cvelist	CVE-2024-3467 Deserialization of Untrusted Data in AVEVA PI Asset Framework Client	12 Jun 202421:04	–	cvelist
EUVD	EUVD-2024-32053	3 Oct 202520:07	–	euvd
NVD	CVE-2024-3467	12 Jun 202421:15	–	nvd
OSV	CVE-2024-3467	12 Jun 202421:15	–	osv
Positive Technologies	PT-2024-4214 · Aveva · Aveva Pi Asset Framework Client	11 Jun 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-3467	23 May 202509:21	–	redhatcve
Vulnrichment	CVE-2024-3467 Deserialization of Untrusted Data in AVEVA PI Asset Framework Client	12 Jun 202421:04	–	vulnrichment

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-163-03.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-24-163-03
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/topics/industrial-control-systems
cisa	www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
cisa	www.cisa.gov/uscert/ncas/tips/ST04-014
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

11 Jun 2024 06:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.17.8

CVSS 47

EPSS0.00188

SSVC