AVEVA Enterprise Data Management Web

Risk Summary

Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected device.

CVEs (3)

Remediations

• AVEVA reports that affected users are recommended to upgrade to AVEVA Enterprise Data Management Web v2019 SP1 as soon as possible. If an upgrade to v2019 SP1 is not possible, users can contact AVEVA Global Customer Support, and a hot-fix can be made available for eDNA Web v2018 SP2. Other versions will not be hot-fixed and must be upgraded. For help with applying upgrades and hot-fixes, please contact AVEVA Global Customer Support.
• For more information see the AVEVA security bulletin here.

Affected Vendors

Affected Products (1)

Affected Sectors

Critical Manufacturing, Information Technology