AVEVA PI Asset Framework Client

ics🔗 www.cisa.gov👁 51 Views

AVEVA PI Asset Framework Client vulnerability in Deserialization of Untrusted Data, allowing malicious code execution in PI System Explorer

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	AVEVA PI Asset Framework Client Code Execution	21 Jun 202400:00	–	bdu_fstec
CNNVD	Osisoft PI Asset Framework Code Issue Vulnerability	12 Jun 202400:00	–	cnnvd
CVE	CVE-2024-3467	12 Jun 202421:04	–	cve
Cvelist	CVE-2024-3467 Deserialization of Untrusted Data in AVEVA PI Asset Framework Client	12 Jun 202421:04	–	cvelist
EUVD	EUVD-2024-32053	3 Oct 202520:07	–	euvd
NVD	CVE-2024-3467	12 Jun 202421:15	–	nvd
osv_cve	CVE-2024-3467	12 Jun 202421:15	–	osv_cve
Positive Technologies	PT-2024-4214 · Aveva · Aveva Pi Asset Framework Client	11 Jun 202400:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2024-3467: Deserialization of Untrusted Data	12 Jun 202400:00	–	rapid7
RedhatCVE	CVE-2024-3467	23 May 202509:21	–	redhatcve

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-163-03.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-24-163-03
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/topics/industrial-control-systems
cisa	www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
cisa	www.cisa.gov/uscert/ncas/tips/ST04-014
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

11 Jun 2024 06:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.17.8

CVSS 47

EPSS0.00188

SSVC