Description (CNA)
The vulnerability, if exploited, could allow an unauthenticated miscreant to achieve remote code execution under OS system privileges of “taoimr” service, potentially resulting in complete compromise of the model application server.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| AVEVA / Process Optimization | affected 0 through 2024.1 |
CWE
CWE-94
References
- https://www.aveva.com/en/support-and-success/cyber-security-updates/
- https://softwaresupportsp.aveva.com/en-US/downloads/products/details/a643eaa3-0d85-4fde-ac11-5239e87a68ea
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-015-01
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-015-01.json
ADP enrichment
No English description supplied.
No references supplied.