CVE-2023-1256critical

CVE-2023-1256: critical vulnerability in AVEVA Plant SCADA

CVE-2023-1256

Published · Updated

Follow this CVE+ Monitor Plant SCADA+ Monitor Telemetry Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.8epss 0.7%
The listed versions of AVEVA Plant SCADA and AVEVA Telemetry Server are vulnerable to an improper authorization exploit which could allow an unauthenticated user to remotely read data, cause denial of service, and tamper with alarm states.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
AVEVA · AVEVA Plant SCADAAVEVA · AVEVA Telemetry Server