CVE-2023-33873

🗓️ 15 Nov 2023 17:15:41Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 8 Views

Privilege escalation vulnerability allows local OS-authenticated user to escalate to System privilege, resulting in complete compromise of target machin

Reporter	Title	Published	Views	Family All 8
CNNVD	AVEVA Operations Control Logger Security Vulnerability	15 Nov 202300:00	–	cnnvd
CVE	CVE-2023-33873	15 Nov 202316:22	–	cve
Cvelist	CVE-2023-33873 AVEVA Operations Control Logger Execution with Unnecessary Privileges	15 Nov 202316:22	–	cvelist
EUVD	EUVD-2023-38023	3 Oct 202520:07	–	euvd
ICS	AVEVA Operations Control Logger	14 Nov 202307:00	–	ics
Prion	Privilege escalation	15 Nov 202317:15	–	prion
Positive Technologies	PT-2023-24526 · Aveva · Application Server +14	15 Nov 202300:00	–	ptsecurity
Vulnrichment	CVE-2023-33873 AVEVA Operations Control Logger Execution with Unnecessary Privileges	15 Nov 202316:22	–	vulnrichment

NVD

Node

aveva batch_managementRange<2020

OR

aveva batch_managementMatch2020-

OR

aveva batch_managementMatch2020sp1

OR

aveva communication_driversRange<2020

OR

aveva communication_driversMatch2020-

OR

aveva communication_driversMatch2020r2

OR

aveva communication_driversMatch2020r2_p01

OR

aveva edgeRange≤20.1.101

OR

aveva enterprise_licensingRange≤3.7.002

OR

aveva historianRange<2020

OR

aveva historianMatch2020-

OR

aveva historianMatch2020r2

OR

aveva historianMatch2020r2_p01

OR

aveva intouchRange<2020

OR

aveva intouchMatch2020-

OR

aveva intouchMatch2020r2

OR

aveva intouchMatch2020r2_p01

OR

aveva manufacturing_execution_systemRange<2020

OR

aveva manufacturing_execution_systemMatch2020

OR

aveva manufacturing_execution_systemMatch2020p01

OR

aveva mobile_operatorRange<2020

OR

aveva mobile_operatorMatch2020

OR

aveva mobile_operatorMatch2020-

OR

aveva mobile_operatorMatch2020r1

OR

aveva plant_scadaRange<2020

OR

aveva plant_scadaMatch2020-

OR

aveva plant_scadaMatch2020r2

OR

aveva recipe_managementRange<2020

OR

aveva recipe_managementMatch2020-

OR

aveva recipe_managementMatch2020update_1_patch_2

OR

aveva system_platformRange<2020

OR

aveva system_platformMatch2020-

OR

aveva system_platformMatch2020r2

OR

aveva system_platformMatch2020r2_p01

OR

aveva telemetry_serverMatch2020r2-

OR

aveva telemetry_serverMatch2020r2sp1

OR

aveva work_tasksRange<2020

OR

aveva work_tasksMatch2020-

OR

aveva work_tasksMatch2020update_1

OR

aveva work_tasksMatch2020update_2

Source	Link
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-318-01
aveva	www.aveva.com/en/support-and-success/cyber-security-updates/

21 Nov 2024 08:06Current

CVSS 3.17.8

EPSS0.00236

privilege escalation vulnerability local user os-authenticated system privilege complete compromise target machine