CVE-2024-6456

CVSS V2 None CVSS V3 None

Description

AVEVA Historian Server has a vulnerability, if exploited, could allow a malicious SQL command to execute under the privileges of an interactive Historian REST Interface user who had been socially engineered by a miscreant into opening a specially crafted URL.

Overview

CVE ID
CVE-2024-6456

Assigner
icscert

Vulnerability Status
PUBLISHED

Published Version
2024-08-15T20:10:58.586Z

Last Modified Date
2024-08-15T20:10:58.586Z

Weakness Enumerations

CWE	URL
CWE-89	http://cwe.mitre.org/data/definitions/89.html

References

Reference URL	Reference Tags
https://www.cisa.gov/news-events/ics-advisories/icsa-24-228-10	government-resource

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-6456
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6456

History

Created	Old Value	New Value	Data Type	Notes
2024-08-16 13:09:08				Added to TrackCVE