Description
The listed versions of AVEVA Plant SCADA and AVEVA Telemetry Server are vulnerable to an improper authorization exploit which could allow an unauthenticated user to remotely read data, cause denial of service, and tamper with alarm states.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
AVEVA AVEVA Plant SCADA
2023 Update 10affected
AVEVA AVEVA Plant SCADA
2020R2 Update 10affected
AVEVA AVEVA Telemetry Server
2020 R2 SP1affected