Multiple vulnerabilities in AVEVA Operations Control Logger

Published: 2023-11-15

Risk	Low
Patch available	YES
Number of vulnerabilities	2
CVE-ID	CVE-2023-33873 CVE-2023-34982
CWE-ID	CWE-250 CWE-73
Exploitation vector	Local
Public exploit	N/A
Vulnerable software Subscribe	AVEVA SystemPlatform Other software / Other software solutions AVEVA Application Server Other software / Other software solutions AVEVA Enterprise Licensing Other software / Other software solutions AVEVA Recipe Management Other software / Other software solutions AVEVA Worktasks Other software / Other software solutions AVEVA Plant SCADA Other software / Other software solutions AVEVA Telemetry Server Other software / Other software solutions AVEVA Operations Control Logger Other software / Other software solutions AVEVA Historian Server applications / Other server solutions AVEVA InTouch Server applications / Other server solutions AVEVA Manufacturing Execution System Server applications / Other server solutions AVEVA Batch Management Server applications / Other server solutions AVEVA Mobile Operator Server applications / Other server solutions AVEVA Communication Drivers Pack Server applications / Other server solutions AVEVA Edge Server applications / SCADA systems
Vendor	AVEVA Software, LLC.

Security Bulletin

This security bulletin contains information about 2 vulnerabilities.

1) Execution with unnecessary privileges

EUVDB-ID: #VU83208

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-33873

CWE-ID: CWE-250 - Execution with Unnecessary Privileges

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to application binary has a setuid bit. A local low-privileged user can run the affected binary and execute arbitrary code on the system with root privileges.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

AVEVA SystemPlatform: 2020 R2 SP1 P01

AVEVA Historian: 2020 R2 SP1 P01

AVEVA Application Server: 2020 R2 SP1 P01

AVEVA InTouch: 2020 R2 SP1 P01

AVEVA Enterprise Licensing: 3.7.002

AVEVA Manufacturing Execution System: 2020 P01

AVEVA Recipe Management: 2020 R2 Update 1 Patch 2

AVEVA Batch Management: 2020 SP1

AVEVA Edge: 2020 R2 SP1 P01

AVEVA Worktasks: 2020 U2

AVEVA Plant SCADA: 2020 R2 Update 15

AVEVA Mobile Operator: 2020 R1

AVEVA Communication Drivers Pack: 2020 R2 SP1

AVEVA Telemetry Server: 2020 R2 SP1

AVEVA Operations Control Logger: before 22.1

External links

http://www.cisa.gov/news-events/ics-advisories/icsa-23-318-01
http://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AV...

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) External Control of File Name or Path

EUVDB-ID: #VU83209