CVE-2023-1256

Published: Mar 16, 2023Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

The listed versions of AVEVA Plant SCADA and AVEVA Telemetry Server are vulnerable to an improper authorization exploit which could allow an unauthenticated user to remotely read data, cause denial of service, and tamper with alarm states.

Affected (6)

Products: Aveva: Aveva Plant Scada, Telemetry Server

Aveva

2 products

Aveva Plant Scada

Telemetry Server

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Aveva Aveva Plant Scada	Version 2020r2
Aveva Aveva Plant Scada	Version 2020r2 update_10
Aveva Aveva Plant Scada	Version 2023
Aveva Aveva Plant Scada	Version 2023 update_10
Aveva Telemetry Server	Version 2020r2
Aveva Telemetry Server	Version 2020r2 sp1

References (2)

https://www.cisa.gov/news-events/ics-advisories/icsa-23-073-04

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://www.cisa.gov/news-events/ics-advisories/icsa-23-073-04

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.