AVEVA Operations Control Logger Execution with Unnecessary Privileges
This privilege escalation vulnerability, if exploited, cloud allow a local OS-authenticated user with standard privileges to escalate to System privilege on the machine where these products are installed, resulting in complete compromise of the target machine.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
SystemPlatform
Vendor
AVEVA
Product
SystemPlatform
Platforms
Unknown
Default status
unaffected
SystemPlatform · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
2020 R2 SP1 P01
None listed
Historian
Vendor
AVEVA
Product
Historian
Platforms
Unknown
Default status
unaffected
Historian · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
2020 R2 SP1 P01
None listed
Application Server
Vendor
AVEVA
Product
Application Server
Platforms
Unknown
Default status
unaffected
Application Server · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
2020 R2 SP1 P01
None listed
InTouch
Vendor
AVEVA
Product
InTouch
Platforms
Unknown
Default status
unaffected
InTouch · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
2020 R2 SP1 P01
None listed
Enterprise Licensing (formerly known as License Manager)
Vendor
AVEVA
Product
Enterprise Licensing (formerly known as License Manager)
Platforms
Unknown
Default status
unaffected
Enterprise Licensing (formerly known as License Manager) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
3.7.002
None listed
Manufacturing Execution System (formerly known as Wonderware MES)
Vendor
AVEVA
Product
Manufacturing Execution System (formerly known as Wonderware MES)
Platforms
Unknown
Default status
unaffected
Manufacturing Execution System (formerly known as Wonderware MES) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
2020 P01
None listed
Recipe Management
Vendor
AVEVA
Product
Recipe Management
Platforms
Unknown
Default status
unaffected
Recipe Management · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
2020 R2 Update 1 Patch 2
None listed
Batch Management
Vendor
AVEVA
Product
Batch Management
Platforms
Unknown
Default status
unaffected
Batch Management · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
2020 SP1
None listed
Edge (formerly known as Indusoft Web Studio)
Vendor
AVEVA
Product
Edge (formerly known as Indusoft Web Studio)
Platforms
Unknown
Default status
unaffected
Edge (formerly known as Indusoft Web Studio) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
2020 R2 SP1 P01
None listed
Worktasks (formerly known as Workflow Management)
Vendor
AVEVA
Product
Worktasks (formerly known as Workflow Management)
Platforms
Unknown
Default status
unaffected
Worktasks (formerly known as Workflow Management) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
2020 U2
None listed
Plant SCADA (formerly known as Citect)
Vendor
AVEVA
Product
Plant SCADA (formerly known as Citect)
Platforms
Unknown
Default status
unaffected
Plant SCADA (formerly known as Citect) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
2020 R2 Update 15
None listed
Mobile Operator (formerly known as IntelaTrac Mobile Operator Rounds)
Vendor
AVEVA
Product
Mobile Operator (formerly known as IntelaTrac Mobile Operator Rounds)
Platforms
Unknown
Default status
unaffected
Mobile Operator (formerly known as IntelaTrac Mobile Operator Rounds) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
2020 R1
None listed
Communication Drivers Pack
Vendor
AVEVA
Product
Communication Drivers Pack
Platforms
Unknown
Default status
unaffected
Communication Drivers Pack · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
2020 R2 SP1
None listed
Telemetry Server
Vendor
AVEVA
Product
Telemetry Server
Platforms
Unknown
Default status
unaffected
Telemetry Server · Scoped product and version facts