CVE-2023-34982
Estado: ModificadaAlta (7.1)—
This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where these products are installed, resulting in denial of service.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
- Puntuación base: 7.1
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.22%
- Percentil entre todas las CVEs puntuadas: 11
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (13)
CWE
- CWE-73
- CWE-610
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2023-34982",
"cveTags": [],
"metrics": {
"cvssMetricV31": [
{
"type": "Secondary",
"source": "ics-cert@hq.dhs.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 5.5,
"attackVector": "LOCAL",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 1.8
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.1,
"attackVector": "LOCAL",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "NONE"
},
"impactScore": 5.2,
"exploitabilityScore": 1.8
}
]
},
"affected": [
{
"source": "ics-cert@hq.dhs.gov",
"affectedData": [
{
"vendor": "AVEVA ",
"product": "SystemPlatform",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "2020 R2 SP1 P01"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "AVEVA ",
"product": "Historian",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "2020 R2 SP1 P01"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "AVEVA ",
"product": "Application Server",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "2020 R2 SP1 P01"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "AVEVA ",
"product": "InTouch",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "2020 R2 SP1 P01"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "AVEVA ",
"product": "Enterprise Licensing (formerly known as License Manager)",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "3.7.002"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "AVEVA ",
"product": "Manufacturing Execution System (formerly known as Wonderware MES)",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "2020 P01"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "AVEVA ",
"product": "Recipe Management",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "2020 R2 Update 1 Patch 2 "
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "AVEVA ",
"product": "Batch Management",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "2020 SP1 "
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "AVEVA ",
"product": "Edge (formerly known as Indusoft Web Studio)",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "2020 R2 SP1 P01"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "AVEVA ",
"product": "Worktasks (formerly known as Workflow Management)",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "2020 U2"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "AVEVA ",
"product": "Plant SCADA (formerly known as Citect)",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "2020 R2 Update 15"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "AVEVA ",
"product": "Mobile Operator (formerly known as IntelaTrac Mobile Operator Rounds)",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "2020 R1"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "AVEVA ",
"product": "Communication Drivers Pack",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "2020 R2 SP1"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "AVEVA ",
"product": "Telemetry Server",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "2020 R2 SP1"
}
],
"defaultStatus": "unaffected"
}
]
}
],
"published": "2023-11-15T17:15:41.563",
"references": [
{
"url": "https://www.aveva.com/en/support-and-success/cyber-security-updates/",
"tags": [
"Vendor Advisory"
],
"source": "ics-cert@hq.dhs.gov"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-318-01",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "ics-cert@hq.dhs.gov"
},
{
"url": "https://www.aveva.com/en/support-and-success/cyber-security-updates/",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-318-01",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "ics-cert@hq.dhs.gov",
"description": [
{
"lang": "en",
"value": "CWE-73"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-610"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "\nThis external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where these products are installed, resulting in denial of service.\n\n"
},
{
"lang": "es",
"value": "Esta vulnerabilidad de control externo, si se explota, podría permitir que un usuario local autenticado en el sistema operativo con privilegios estándar elimine archivos con privilegios de sistema en la máquina donde están instalados estos productos, lo que resultaría en una denegación de servicio."
}
],
"lastModified": "2026-06-17T06:04:12.843",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:aveva:batch_management:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5C2AEDAE-18DB-40C0-AFB0-57136A822BBE",
"versionEndExcluding": "2020"
},
{
"criteria": "cpe:2.3:a:aveva:batch_management:2020:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F546770E-B402-4577-8E0D-C7D34CFDE549"
},
{
"criteria": "cpe:2.3:a:aveva:batch_management:2020:sp1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6A67B8AC-2282-4F39-9795-D61F48304049"
},
{
"criteria": "cpe:2.3:a:aveva:communication_drivers:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D62B3995-706D-4285-A3C7-900ED2D176B1",
"versionEndExcluding": "2020"
},
{
"criteria": "cpe:2.3:a:aveva:communication_drivers:2020:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D97EE6DC-CCB3-40FF-BC75-A694DCBCE50D"
},
{
"criteria": "cpe:2.3:a:aveva:communication_drivers:2020:r2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B74F0988-CB5D-4FC4-8CBD-6B43F6CB4C22"
},
{
"criteria": "cpe:2.3:a:aveva:communication_drivers:2020:r2_p01:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B38368FD-D573-4C6A-BBB7-B0CC477C44AD"
},
{
"criteria": "cpe:2.3:a:aveva:edge:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6CE5AEFF-0C5F-499C-B4AF-3594CC591061",
"versionEndIncluding": "20.1.101"
},
{
"criteria": "cpe:2.3:a:aveva:enterprise_licensing:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9D63D153-5F92-4732-8CE7-BF821FDC1FFC",
"versionEndIncluding": "3.7.002"
},
{
"criteria": "cpe:2.3:a:aveva:historian:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "310008CD-1FB4-47C3-9B20-1DF0BC537019",
"versionEndExcluding": "2020"
},
{
"criteria": "cpe:2.3:a:aveva:historian:2020:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "33FE93BF-8221-4A84-845B-13693E28F570"
},
{
"criteria": "cpe:2.3:a:aveva:historian:2020:r2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D479F013-5ABC-4B59-845A-E06EF0ADF107"
},
{
"criteria": "cpe:2.3:a:aveva:historian:2020:r2_p01:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5B67B330-EB63-4026-A961-EA2EE76A8355"
},
{
"criteria": "cpe:2.3:a:aveva:intouch:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "06F39A93-CE38-4696-A301-3B08BB02AA0F",
"versionEndExcluding": "2020"
},
{
"criteria": "cpe:2.3:a:aveva:intouch:2020:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "87B6DFEA-FED8-4A02-B09A-2676D5C8A5DC"
},
{
"criteria": "cpe:2.3:a:aveva:intouch:2020:r2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A3FDBC50-37E5-4F02-BDAC-22490D139C71"
},
{
"criteria": "cpe:2.3:a:aveva:intouch:2020:r2_p01:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A7D7123E-2439-4325-9733-F10DFF180C35"
},
{
"criteria": "cpe:2.3:a:aveva:manufacturing_execution_system:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E5519C16-D78F-4B03-BF68-25977782C15C",
"versionEndExcluding": "2020"
},
{
"criteria": "cpe:2.3:a:aveva:manufacturing_execution_system:2020:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1288B3F5-2A5F-4516-96F8-FDB33A71060A"
},
{
"criteria": "cpe:2.3:a:aveva:manufacturing_execution_system:2020:p01:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "353CAFF0-2928-46F1-B5B5-9F0122BCDF38"
},
{
"criteria": "cpe:2.3:a:aveva:mobile_operator:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2244B652-6874-4BD3-9F6A-C01274CE7F25",
"versionEndExcluding": "2020"
},
{
"criteria": "cpe:2.3:a:aveva:mobile_operator:2020:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "40D03AD9-31E2-422F-9137-4E881A942C74"
},
{
"criteria": "cpe:2.3:a:aveva:mobile_operator:2020:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B9AA5D22-126E-4E0B-AD44-8990B9218AA6"
},
{
"criteria": "cpe:2.3:a:aveva:mobile_operator:2020:r1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "062CEF6D-5308-4CC7-A20A-84298C527C14"
},
{
"criteria": "cpe:2.3:a:aveva:plant_scada:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "63BCBC30-F337-47AB-96F1-54E46F735B1E",
"versionEndExcluding": "2020"
},
{
"criteria": "cpe:2.3:a:aveva:plant_scada:2020:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7B493552-4A0D-49DC-8669-C7E714669D98"
},
{
"criteria": "cpe:2.3:a:aveva:plant_scada:2020:r2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2B714DE8-6E27-48ED-8CB5-6FD3DECB8718"
},
{
"criteria": "cpe:2.3:a:aveva:recipe_management:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4FF7755E-D26A-4D55-88BB-2811A18C2589",
"versionEndExcluding": "2020"
},
{
"criteria": "cpe:2.3:a:aveva:recipe_management:2020:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5B0AB6DC-D05F-429F-9FEF-500BE9780456"
},
{
"criteria": "cpe:2.3:a:aveva:recipe_management:2020:update_1_patch_2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8E69E722-AA58-49BD-9D22-5A6DC40FE85F"
},
{
"criteria": "cpe:2.3:a:aveva:system_platform:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "18048EB2-8F4C-4C75-93BD-0C3D6C42AB4A",
"versionEndExcluding": "2020"
},
{
"criteria": "cpe:2.3:a:aveva:system_platform:2020:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D47F4B07-B67F-4855-AED2-D17B0E76FA8A"
},
{
"criteria": "cpe:2.3:a:aveva:system_platform:2020:r2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1ED7E9C7-B882-4F57-B796-59A4F90EE185"
},
{
"criteria": "cpe:2.3:a:aveva:system_platform:2020:r2_p01:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "33D5FF9C-590D-4BA3-A265-35956E4F36DF"
},
{
"criteria": "cpe:2.3:a:aveva:telemetry_server:2020r2:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "12AD341A-07AE-4837-A1DC-471FFF0926DC"
},
{
"criteria": "cpe:2.3:a:aveva:telemetry_server:2020r2:sp1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "62A91A30-CB69-4E14-9C32-BF848E740944"
},
{
"criteria": "cpe:2.3:a:aveva:work_tasks:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "061DD968-A34E-4AA2-B0EC-ECBAF4B15605",
"versionEndExcluding": "2020"
},
{
"criteria": "cpe:2.3:a:aveva:work_tasks:2020:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78E65146-9CB1-423B-A565-48530C453382"
},
{
"criteria": "cpe:2.3:a:aveva:work_tasks:2020:update_1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "64EF2703-3C49-468A-ADA9-E78173DF4F65"
},
{
"criteria": "cpe:2.3:a:aveva:work_tasks:2020:update_2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4131B6FF-AF15-4F52-9415-A9E150B169DD"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "ics-cert@hq.dhs.gov"
}