Lucene search
HistoryJun 12, 2024 - 9:15 p.m.
CVE-2024-3468
aveva pi web api
vulnerability
malicious code
execute
privilege escalation
social engineering
xml import
0.0004 Low
EPSS
Percentile
9.1%
There is a vulnerability in AVEVA PI Web API that could allow malicious code to execute on the PI Web API environment under the privileges of an interactive user that was socially engineered to use API XML import functionality with content supplied by an attacker.
Related
cvelist
cvelist
CVE-2024-3468 Deserialization of Untrusted Data in AVEVA PI Web API
2024-06-12 21:04:28
vulnrichment
vulnrichment
CVE-2024-3468 Deserialization of Untrusted Data in AVEVA PI Web API
2024-06-12 21:04:28
ics
ics
AVEVA PI Web API
2024-06-11 12:00:00
cve
cve
CVE-2024-3468
2024-06-12 21:15:50