VULNERABILITY INTELLIGENCE

CVE-2024-3467

CVSS score7.8 HIGH
EPSS probability0.19%
CISA KEVNot currently listed
Published2024-06-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

There is a vulnerability in AVEVA PI Asset Framework Client that could allow malicious code to execute on the PI System Explorer environment under the privileges of an interactive user that was socially engineered to import XML supplied by an attacker.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-502

Primary references