Social Engineering Vulnerability in PI System Explorer
CVE-2024-3467

7.8HIGH

Key Information:

Vendor

AVEVA

Status
Pi Asset Framework Client
Vendor
CVE Published:
12 June 2024

What is CVE-2024-3467?

A vulnerability in the AVEVA PI Asset Framework Client has been identified, allowing potential execution of malicious code in the PI System Explorer environment. This issue arises when an interactive user is manipulated into importing a malicious XML file provided by an attacker. The exploit leverages social engineering tactics, compromising system security and increasing the risk of unauthorized access to sensitive data.

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-1...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

.