Description
This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where these products are installed, resulting in denial of service.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
AVEVA SystemPlatform
Default version status: unaffected
0 to ≤ 2020 R2 SP1 P01affected
AVEVA Historian
Default version status: unaffected
0 to ≤ 2020 R2 SP1 P01affected
AVEVA Application Server
Default version status: unaffected
0 to ≤ 2020 R2 SP1 P01affected
AVEVA InTouch
Default version status: unaffected
0 to ≤ 2020 R2 SP1 P01affected
AVEVA Enterprise Licensing (formerly known as License Manager)
Default version status: unaffected
0 to ≤ 3.7.002affected
AVEVA Manufacturing Execution System (formerly known as Wonderware MES)
Default version status: unaffected
0 to ≤ 2020 P01affected
AVEVA Recipe Management
Default version status: unaffected
0 to ≤ 2020 R2 Update 1 Patch 2affected
AVEVA Batch Management
Default version status: unaffected
0 to ≤ 2020 SP1affected
AVEVA Edge (formerly known as Indusoft Web Studio)
Default version status: unaffected
0 to ≤ 2020 R2 SP1 P01affected
AVEVA Worktasks (formerly known as Workflow Management)
Default version status: unaffected
0 to ≤ 2020 U2affected
AVEVA Plant SCADA (formerly known as Citect)
Default version status: unaffected
0 to ≤ 2020 R2 Update 15affected
AVEVA Mobile Operator (formerly known as IntelaTrac Mobile Operator Rounds)
Default version status: unaffected
0 to ≤ 2020 R1affected
AVEVA Communication Drivers Pack
Default version status: unaffected
0 to ≤ 2020 R2 SP1affected
AVEVA Telemetry Server
Default version status: unaffected
0 to ≤ 2020 R2 SP1affected