Approved changes feed: RSS · Atom

cpe:2.3:a:aveva:pi_asset_framework_client:2023:*:*:*:*:*:*:*

part: a version: 2023 update: *

VendorAveva (419325dd-398d-5d8e-98c9-e41c800a541d)
ProductPi Asset Framework Client (97132506-6447-5147-9b2e-e897f8df5262)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-3467 vulnerable 2026-06-03 14:56:24.446230 Deserialization of Untrusted Data in AVEVA PI Asset Framework Client
There is a vulnerability in AVEVA PI Asset Framework Client that could allow malicious code to execute on the PI System Explorer environment under the privileges of an interactive user that was socially engineered to import XML supplied by an attacker.
Published: 2024-06-12T21:04:26.635Z
Updated: 2024-08-01T20:12:07.612Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.