Unrated severityNVD Advisory· Published Mar 16, 2023· Updated Jan 16, 2025

CVE-2023-1256

Description

The listed versions of AVEVA Plant SCADA and AVEVA Telemetry Server are vulnerable to an improper authorization exploit which could allow an unauthenticated user to remotely read data, cause denial of service, and tamper with alarm states.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Aveva/Plant SCADAllm-create2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 2020R2 Update 10
Exemys/Telemetry Web Serverllm-fuzzy
AVEVA/AVEVA Telemetry Serverv5
Range: 2020 R2 SP1

Patches

Vulnerability mechanics

References

www.cisa.gov/news-events/ics-advisories/icsa-23-073-04mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000