CVE-2023-33873

Published: Nov 15, 2023Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

This privilege escalation vulnerability, if exploited, cloud allow a local OS-authenticated user with standard privileges to escalate to System privilege on the machine where these products are installed, resulting in complete compromise of the target machine.

Affected (40)

Products: Aveva: Batch Management, Communication Drivers, Edge, Enterprise Licensing, Historian, Intouch, Manufacturing Execution System, Mobile Operator, Plant Scada, Recipe Management, System Platform, Telemetry Server, Work Tasks

Aveva

13 products

Batch Management

Communication Drivers

Manufacturing Execution System

Configuration A

40 vulnerable

Vulnerable Software	Affected Versions
Aveva Batch Management	Before 2020
Aveva Batch Management	Version 2020
Aveva Batch Management	Version 2020 sp1
Aveva Communication Drivers	Before 2020
Aveva Communication Drivers	Version 2020
Aveva Communication Drivers	Version 2020 r2
Aveva Communication Drivers	Version 2020 r2_p01
Aveva Edge	Up to 20.1.101
Aveva Enterprise Licensing	Up to 3.7.002
Aveva Historian	Before 2020
Aveva Historian	Version 2020
Aveva Historian	Version 2020 r2
Aveva Historian	Version 2020 r2_p01
Aveva Intouch	Before 2020
Aveva Intouch	Version 2020
Aveva Intouch	Version 2020 r2
Aveva Intouch	Version 2020 r2_p01
Aveva Manufacturing Execution System	Before 2020
Aveva Manufacturing Execution System	Version 2020
Aveva Manufacturing Execution System	Version 2020 p01
Aveva Mobile Operator	Before 2020
Aveva Mobile Operator	Version 2020
Aveva Mobile Operator	Version 2020
Aveva Mobile Operator	Version 2020 r1
Aveva Plant Scada	Before 2020
Aveva Plant Scada	Version 2020
Aveva Plant Scada	Version 2020 r2
Aveva Recipe Management	Before 2020
Aveva Recipe Management	Version 2020
Aveva Recipe Management	Version 2020 update_1_patch_2
Aveva System Platform	Before 2020
Aveva System Platform	Version 2020
Aveva System Platform	Version 2020 r2
Aveva System Platform	Version 2020 r2_p01
Aveva Telemetry Server	Version 2020r2
Aveva Telemetry Server	Version 2020r2 sp1
Aveva Work Tasks	Before 2020
Aveva Work Tasks	Version 2020
Aveva Work Tasks	Version 2020 update_1
Aveva Work Tasks	Version 2020 update_2