{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2023-1256",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2023-1256",
    "idYear": 2023,
    "status": "PUBLISHED",
    "publishedAt": "2023-03-16T18:33:52.907Z",
    "updatedAt": "2025-01-16T21:42:14.018Z",
    "importedAt": "2026-10-24T01:56:49.724Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "CVE-2023-1256",
      "summary": "The listed versions of AVEVA Plant SCADA and AVEVA Telemetry Server are vulnerable to an improper authorization exploit which could allow an unauthenticated user to remotely read data, cause denial of service, and tamper with alarm states.",
      "affected": [
        {
          "vendor": "AVEVA",
          "product": "AVEVA Plant SCADA",
          "versions": [
            {
              "version": "2023 Update 10",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "AVEVA",
          "product": "AVEVA Plant SCADA",
          "versions": [
            {
              "version": "2020R2 Update 10",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "AVEVA",
          "product": "AVEVA Telemetry Server",
          "versions": [
            {
              "version": "2020 R2 SP1",
              "status": "affected"
            }
          ]
        }
      ]
    }
  }
}