← CVE Intelligence

CVE-2024-3467

Deserialization of Untrusted Data in AVEVA PI Asset Framework Client PUBLISHED

Description (CNA)

There is a vulnerability in AVEVA PI Asset Framework Client that could allow malicious code to execute on the PI System Explorer environment under the privileges of an interactive user that was socially engineered to import XML supplied by an attacker.

Affected (CNA)

Vendor / productVersions
AVEVA / PI Asset Framework Clientaffected 2023; affected 0 through 2018 SP3 P04

CWE

CWE-502

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.