Missing Release of Resource after Effective Lifetime vulnerability in Aveva PI Server

CVE-2023-31274

What is CVE-2023-31274?

AVEVA PI Server versions 2023 and 2018 SP3 P05 and earlier versions contain a vulnerability that allows unauthenticated users to exploit the PI Message Subsystem. This exploitation can lead to significant memory consumption, affecting the server's ability to process new PI Data Archive events efficiently, ultimately resulting in throttled processing and creating a partial denial-of-service scenario.

References