CVE-2023-6132

Summary

The vulnerability, if exploited, could allow a malicious entity with access to the file system to achieve arbitrary code execution and privilege escalation by tricking AVEVA Edge to load an unsafe DLL.

Affected Software

Weaknesses

• CWE-427: CWE-427 Uncontrolled Search Path Element

ADP Enrichment

CVE Program Container

Additional References

• https://www.cisa.gov/news-events/ics-advisories/icsa-24-032-03
• https://www.aveva.com/en/support-and-success/cyber-security-updates/

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-24-032-03
• https://www.aveva.com/en/support-and-success/cyber-security-updates/

• ←Previous
• Next→