发布日期：2023-11-15

更新日期：2024-02-06

受影响系统：

AVEVA AVEVA Operations Control Logger

描述：

CVE(CAN) ID: CVE-2023-33873

AVEVA Operations Control Logger是英国剑维软件（AVEVA）公司的一个控制中心，提供跨本地和云应用程序的访问。

AVEVA Operations Control Logger存在权限提升漏洞，具有标准权限且经过身份认证的本地攻击者可利用该漏洞提升权限，进而破坏目标机器。

< *链接：https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AV

*>

建议：

厂商补丁：

AVEVA

-----

AVEVA已经为此发布了一个安全公告（AVEVA-2023-003）以及相应补丁:

AVEVA-2023-003：AVEVA Operations Control Logger: Local Privilege Escalation and Arbitrary File Delete Vulnerabilities

链接：https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2023-003.pdf

浏览次数：33

严重程度：0（网友投票）