Recipe Management CVEs and Security Vulnerabilities

CVE-2023-33873

AVEVA Operations Control Logger Execution with Unnecessary Privileges

This privilege escalation vulnerability, if exploited, cloud allow a local OS-authenticated user with standard privileges to escalate to System privilege on the machine where these products are installed, resulting in complete compromise of the target machine.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Aveva

Products

Batch Management Communication Drivers Edge and 10 more

CVE-2023-34982

AVEVA Operations Control Logger External Control of File Name or Path

This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where these products are installed, resulting in denial of service.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed