VULNERABILITY INTELLIGENCE
CVE-2024-3468
EPSS probability0.42%
CISA KEVNot currently listed
Published2024-06-12
Last modified2026-06-17
Description
There is a vulnerability in AVEVA PI Web API that could allow malicious code to execute on the PI Web API environment under the privileges of an interactive user that was socially engineered to use API XML import functionality with content supplied by an attacker.
Weakness classification
- ics-cert@hq.dhs.gov: CWE-502