1. Home
  2. CVE Database
  3. CVE-2024-3467
HIGH · 7.8

CVE-2024-3467

There is a vulnerability in AVEVA PI Asset Framework Client that could allow malicious code to execute on the PI System Explorer environment under the privileges of an interactive user that was social...

Vulnerability Description

There is a vulnerability in AVEVA PI Asset Framework Client that could allow malicious code to execute on the PI System Explorer environment under the privileges of an interactive user that was socially engineered to import XML supplied by an attacker.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
AvevaPi Asset Framework Client2018

Related Weaknesses (CWE)

CWE-502

References

FAQ

What is CVE-2024-3467?

CVE-2024-3467 is a vulnerability with a CVSS score of 7.8 (HIGH). There is a vulnerability in AVEVA PI Asset Framework Client that could allow malicious code to execute on the PI System Explorer environment under the privileges of an interactive user that was social...

How severe is CVE-2024-3467?

CVE-2024-3467 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-3467?

Check the references section above for vendor advisories and patch information. Affected products include: Aveva Pi Asset Framework Client.