发布日期：2023-11-15
更新日期：2024-02-06

受影响系统：

AVEVA AVEVA Operations Control Logger

描述：

---

CVE(CAN) ID: CVE-2023-33873

AVEVA Operations Control Logger是英国剑维软件（AVEVA）公司的一个控制中心，提供跨本地和云应用程序的访问。
AVEVA Operations Control Logger存在权限提升漏洞，具有标准权限且经过身份认证的本地攻击者可利用该漏洞提升权限，进而破坏目标机器。

<*链接：https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AV
*>

建议：

---

厂商补丁：

AVEVA
-----
AVEVA已经为此发布了一个安全公告（AVEVA-2023-003）以及相应补丁:
AVEVA-2023-003：AVEVA Operations Control Logger: Local Privilege Escalation and Arbitrary File Delete Vulnerabilities
链接：https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2023-003.pdf

浏览次数：758
严重程度：0（网友投票）