Lucene search

PRIOn knowledge basePRION:CVE-2023-34982

HistoryNov 15, 2023 - 5:15 p.m.

Xxe

2023-11-1517:15:00

PRIOn knowledge base

www.prio-n.com

external control vulnerability

local user

file deletion

denial of service

nvd

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

6.9 Medium

AI Score

Confidence

Low

3.2 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:N/I:P/A:P

0.0004 Low

EPSS

Percentile

5.5%

JSON

This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where these products are installed, resulting in denial of service.

CPENameOperatorVersion
batch_managementeq2020 sp1
batch_managementlt2020
batch_managementeq2020
communication_driverslt2020
communication_driverseq2020
communication_driverseq2020 r2
communication_driverseq2020 r2-p1
edgele20.1.101
enterprise_licensingle3.7.002
historianeq2020 r2-p1

Name	Operator	Version
batch_management	eq	2020 sp1
batch_management	lt	2020
batch_management	eq	2020
communication_drivers	lt	2020
communication_drivers	eq	2020
communication_drivers	eq	2020 r2
communication_drivers	eq	2020 r2-p1
edge	le	20.1.101
enterprise_licensing	le	3.7.002
historian	eq	2020 r2-p1

Rows per page:

1-10 of 401

References

www.aveva.com/en/support-and-success/cyber-security-updates/

www.cisa.gov/news-events/ics-advisories/icsa-23-318-01

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

6.9 Medium

AI Score

Confidence

Low

3.2 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:N/I:P/A:P

0.0004 Low

EPSS

Percentile

5.5%

JSON

Related for PRION:CVE-2023-34982