Skip to content
CVE PROGRAM SOURCE RECORD7.0 High

CVE-2024-3467

Deserialization of Untrusted Data in AVEVA PI Asset Framework Client

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

There is a vulnerability in AVEVA PI Asset Framework Client that could allow malicious code to execute on the PI System Explorer environment under the privileges of an interactive user that was socially engineered to import XML supplied by an attacker.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AVEVA PI Asset Framework Client

Default version status: unaffected

  • 2023affected
  • 0 to ≤ 2018 SP3 P04affected

References