Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2023-31274

Missing Release of Resource after Effective Lifetime vulnerability in Aveva PI Server

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated user to cause the PI Message Subsystem of a PI Server to consume available memory resulting in throttled processing of new PI Data Archive events and a partial denial-of-service condition.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Aveva PI Server

Default version status: unaffected

  • 2023affected
  • 0 to ≤ 2018 SP3 P05 affected

References