Browse CVEs

HIGH 7.8 CVE-2024-3467 There is a vulnerability in AVEVA PI Asset Framework Client that could allow malicious code to execute on the PI System Explorer environment under th… Pi Asset Framework Client Mitigation only Fix from $1,9502024-06-12 HIGH 7.8 CVE-2023-6132 The vulnerability, if exploited, could allow a malicious entity with access to the file system to achieve arbitrary code execution and privilege esca… Platform Common Services Mitigation only Fix from $1,9502024-02-29 CRITICAL 9.8 CVE-2023-1256 The listed versions of AVEVA Plant SCADA and AVEVA Telemetry Server are vulnerable to an improper authorization exploit which could allow an unauthen… Aveva Plant Scada Mitigation only Fix from $2,3002023-03-16 HIGH 7.8 CVE-2021-38410 AVEVA Software Platform Common Services (PCS) Portal versions 4.5.2, 4.5.1, 4.5.0, and 4.4.6 are vulnerable to DLL hijacking through an uncontrolled … Batch Management Mitigation only Fix from $1,9502022-07-27 CRITICAL 9.9 CVE-2022-1467 Windows OS can be configured to overlay a “language bar” on top of any application. When this OS functionality is enabled, the OS language bar UI wil… Intouch Access Anywhere Mitigation only Fix from $2,3002022-05-23 MEDIUM 5.5 CVE-2022-0835 AVEVA System Platform 2020 stores sensitive information in cleartext, which may allow access to an attacker or a low-privileged user. System Platform Mitigation only Fix from $1,6002022-04-11 CRITICAL 9.8 CVE-2020-13499 An SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053. Specially … Edna Enterprise Data Historian No fix yet Fix from $2,3002020-09-24 CRITICAL 9.8 CVE-2020-13500 SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053. Specially cra… Edna Enterprise Data Historian No fix yet Fix from $2,3002020-09-24 CRITICAL 9.8 CVE-2020-13501 An SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053. Specially … Edna Enterprise Data Historian No fix yet Fix from $2,3002020-09-24 CRITICAL 9.8 CVE-2020-13504 Parameter AttFilterValue in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks. Specially crafted SOAP web requests can cause … Edna Enterprise Data Historian No fix yet Fix from $2,3002020-09-24 CRITICAL 9.8 CVE-2020-13505 Parameter psClass in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks. Specially crafted SOAP web requests can cause SQL inj… Edna Enterprise Data Historian No fix yet Fix from $2,3002020-09-24 CRITICAL 9.8 CVE-2019-6543EPSS 17% AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update… Indusoft Web Studio No fix yet Fix from $2,3002019-02-13 HIGH 7.5 CVE-2019-6545EPSS 14% AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update… Indusoft Web Studio No fix yet Fix from $1,9502019-02-13 CRITICAL 9.8 CVE-2018-17914 InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 SP2. This vulnerability… Indusoft Web Studio No fix yet Fix from $2,3002018-11-02 CRITICAL 9.8 CVE-2018-17916 InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 SP2. A remote attacker … Indusoft Web Studio No fix yet Fix from $2,3002018-11-02 CRITICAL 9.8 CVE-2018-10620 AVEVA InduSoft Web Studio v8.1 and v8.1SP1, and InTouch Machine Edition v2017 8.1 and v2017 8.1 SP1 a remote user could send a carefully crafted pack… Indusoft Web Studio No fix yet Fix from $2,3002018-07-19 MEDIUM 5.0 CVE-2014-5412 Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 allows remote attackers to read database records by leveraging access… Clearscada Mitigation only Fix from $1,6002014-09-18 MEDIUM 5.0 CVE-2014-5413 Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 uses the MD5 algorithm for an X.509 certificate, which makes it easie… Clearscada Mitigation only Fix from $1,6002014-09-18 MEDIUM 6.8 CVE-2014-0779 The PLC driver in ServerMain.exe in the Kepware KepServerEX 4 component in Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R2 build 71.4… Clearscada Mitigation only Fix from $1,6002014-03-14