Description
This privilege escalation vulnerability, if exploited, cloud allow a local OS-authenticated user with standard privileges to escalate to System privilege on the machine where these products are installed, resulting in complete compromise of the target machine.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
AVEVA SystemPlatform
Default version status: unaffected
0 to ≤ 2020 R2 SP1 P01affected
AVEVA Historian
Default version status: unaffected
0 to ≤ 2020 R2 SP1 P01affected
AVEVA Application Server
Default version status: unaffected
0 to ≤ 2020 R2 SP1 P01affected
AVEVA InTouch
Default version status: unaffected
0 to ≤ 2020 R2 SP1 P01affected
AVEVA Enterprise Licensing (formerly known as License Manager)
Default version status: unaffected
0 to ≤ 3.7.002affected
AVEVA Manufacturing Execution System (formerly known as Wonderware MES)
Default version status: unaffected
0 to ≤ 2020 P01affected
AVEVA Recipe Management
Default version status: unaffected
0 to ≤ 2020 R2 Update 1 Patch 2affected
AVEVA Batch Management
Default version status: unaffected
0 to ≤ 2020 SP1affected
AVEVA Edge (formerly known as Indusoft Web Studio)
Default version status: unaffected
0 to ≤ 2020 R2 SP1 P01affected
AVEVA Worktasks (formerly known as Workflow Management)
Default version status: unaffected
0 to ≤ 2020 U2affected
AVEVA Plant SCADA (formerly known as Citect)
Default version status: unaffected
0 to ≤ 2020 R2 Update 15affected
AVEVA Mobile Operator (formerly known as IntelaTrac Mobile Operator Rounds)
Default version status: unaffected
0 to ≤ 2020 R1affected
AVEVA Communication Drivers Pack
Default version status: unaffected
0 to ≤ 2020 R2 SP1affected
AVEVA Telemetry Server
Default version status: unaffected
0 to ≤ 2020 R2 SP1affected