CVE-2023-33873CWE-250

AVEVA Operations Control Logger Execution with Unnecessary Privileges

High · published November 15, 2023

CVSS v3.1
7.8
EPSS
0%
Percentile
13.7
In the wild
Unconfirmed
What it is

This privilege escalation vulnerability, if exploited, cloud allow a local OS-authenticated user with standard privileges to escalate to System privilege on the machine where these products are installed, resulting in complete compromise of the target machine.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00236 · 13.7th percentile
Weakness
CWE-250 · Execution with Unnecessary Privileges
Published
2023-11-15T16:22Z
EPSS history
Timeline
  • 15 NOV 16:22Z
    AVEVA Operations Control Logger Execution with Unnecessary Privileges
    cvelistv5