CVE-2023-1256

CVE-2023-1256 PUBLISHED

Description (CNA)

The listed versions of AVEVA Plant SCADA and AVEVA Telemetry Server are vulnerable to an improper authorization exploit which could allow an unauthenticated user to remotely read data, cause denial of service, and tamper with alarm states.

Affected (CNA)

Vendor / product	Versions
AVEVA / AVEVA Plant SCADA	affected 2023 Update 10
AVEVA / AVEVA Plant SCADA	affected 2020R2 Update 10
AVEVA / AVEVA Telemetry Server	affected 2020 R2 SP1

CWE

No CWE identifiers supplied.

References

https://www.cisa.gov/news-events/ics-advisories/icsa-23-073-04

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/news-events/ics-advisories/icsa-23-073-04

CISA-ADP

No English description supplied.

No references supplied.