发布日期：2023-11-15
更新日期：2024-02-06

受影响系统：

AVEVA AVEVA Operations Control Logger

描述：

---

CVE(CAN) ID: CVE-2023-34982

AVEVA Operations Control Logger是英国剑维软件（AVEVA）公司的一个控制中心，提供跨本地和云应用程序的访问。
AVEVA Operations Control Logger存在外部控制漏洞，具有标准权限且经过身份认证的本地攻击者可利用该漏洞删除产品所在机器上的文件，进而导致拒绝服务。

<*链接：https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AV
*>

建议：

---

厂商补丁：

AVEVA
-----
AVEVA已经为此发布了一个安全公告（AVEVA-2023-003）以及相应补丁:
AVEVA-2023-003：AVEVA Operations Control Logger: Local Privilege Escalation and Arbitrary File Delete Vulnerabilities
链接：https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2023-003.pdf

浏览次数：782
严重程度：0（网友投票）