CVE-2023-34982CWE-73

AVEVA Operations Control Logger External Control of File Name or Path

Medium · published November 15, 2023

CVSS v3.1
5.5
EPSS
0%
Percentile
11.7
In the wild
Unconfirmed
What it is

This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where these products are installed, resulting in denial of service.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00219 · 11.7th percentile
Weakness
CWE-73 · External Control of File Name or Path
Published
2023-11-15T16:28Z
EPSS history
Timeline
  • 15 NOV 16:28Z
    AVEVA Operations Control Logger External Control of File Name or Path
    cvelistv5