AVEVA Edge products (formerly known as InduSoft Web Studio)

Risk Summary

Successful exploitation of this vulnerability could result in an attacker achieving arbitrary code execution and privilege escalation by tricking AVEVA Edge to load an unsafe DLL.

CVEs (1)

Remediations

• AVEVA recommends users upgrade to AVEVA Edge 2023, or AVEVA Edge 2020 R2 SP2 P01 as soon as possible. Upgrades can be downloaded from the AVEVA official website:
• AVEVA Edge 2023
• AVEVA Edge 2020 R2 SP2 P01
• For additional information, please refer to AVEVA's security advisory AVEVA-2024-002.

Affected Vendors

Affected Products (1)

Affected Sectors

Multiple