AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere

Risk Summary

Successful exploitation of this vulnerability could allow an authenticated user to escape from the context of the streamed application into the OS and launch arbitrary OS commands.

CVEs (1)

Remediations

• Disable the Windows language bar on the server machine hosting InTouch Access Anywhere and Plant SCADA Access Anywhere applications unless it is required.
• Create unique user accounts with minimal privileges dedicated only to remote access of InTouch Access Anywhere and Plant SCADA Access Anywhere applications.
• Utilize OS group policy objects (GPOs) to further restrict what those unique user accounts are allowed to do.
• Restrict access based on Microsoft's recommended block list.
• For more information on this vulnerability, including security updates, please see security bulletin AVEVA-2022-001

Affected Vendors

Affected Products (2)

Affected Sectors

Chemical, Critical Manufacturing, Energy, Food and Agriculture, and Water and Wastewater Systems