PT-2024-12265
CVE-2023-31274
·
Published
2024-01-18
·
Updated
2024-01-26
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions
AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior
Description
The issue allows an unauthenticated user to cause the PI Message Subsystem of a PI Server to consume available memory, resulting in throttled processing of new PI Data Archive events and a partial denial-of-service condition.
Recommendations
For AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾