CVE-2023-34348

Summary

AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated user to remotely crash the PI Message Subsystem of a PI Server, resulting in a denial-of-service condition.

Affected Software

VendorProductVersion RangeStatus
AvevaPI Server2023affected
AvevaPI Server0 <= 2018 SP3 P05affected

Weaknesses

  • CWE-703: CWE-703: Improper Check or Handling of Exceptional Conditions

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References