CVE-2024-3467highCWE-502

CVE-2024-3467: high-severity vulnerability in AVEVA PI Asset Framework Client

Deserialization of Untrusted Data in AVEVA PI Asset Framework Client

Published · Updated

Follow this CVE+ Monitor PI Asset Framework Client

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7epss 0.2%
There is a vulnerability in AVEVA PI Asset Framework Client that could allow malicious code to execute on the PI System Explorer environment under the privileges of an interactive user that was socially engineered to import XML supplied by an attacker.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
AVEVA · PI Asset Framework Client