External Control of File Name or Path in AVEVA Software, LLC. products - CVE-2023-34982

Vulnerability identifier: #VU83209

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-34982

CWE-ID: CWE-73

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to delete arbitrary files.

The vulnerability exists due to application allows an attacker to control path of the files to delete. A local user can send a specially crafted HTTP request and delete arbitrary files on the system, leading to denial of service (DoS) condition.

AVEVA SystemPlatform
AVEVA Telemetry Server
AVEVA Application Server
AVEVA Plant SCADA
AVEVA Enterprise Licensing
AVEVA Worktasks
AVEVA Recipe Management
AVEVA Operations Control Logger
AVEVA Historian
AVEVA Communication Drivers Pack
AVEVA InTouch
AVEVA Manufacturing Execution System
AVEVA Mobile Operator
AVEVA Batch Management
AVEVA Edge

Install updates from vendor's website.

AVEVA SystemPlatform - update to 2023
AVEVA Historian - update to 2023
AVEVA Telemetry Server - update to 2020 R2 SP2
AVEVA Application Server - update to 2023
AVEVA Communication Drivers Pack - update to 2023.1
AVEVA InTouch - update to 2023
AVEVA Plant SCADA - update to 2023
AVEVA Enterprise Licensing - update to 4.0
AVEVA Manufacturing Execution System - update to 2023
AVEVA Worktasks - update to 2023 SP1
AVEVA Recipe Management - update to 2023
AVEVA Mobile Operator - update to 2020 R2
AVEVA Batch Management - update to 2023
AVEVA Edge - addressed in versions 2020 R2 SP2, 2023
AVEVA Operations Control Logger - update to 22.1

• https://www.cisa.gov/news-events/ics-advisories/icsa-23-318-01
• https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AV...

• Multiple vulnerabilities in AVEVA Operations Control Logger