CVE:CVE-2023-1256
CNNVD:CNNVD-202303-1240
AVEVA Plant SCADA Access Anywhere是英国剑维软件（AVEVA）公司的一个面向工业过程客户的可靠、灵活且高性能的监控和数据采集 （SCADA） 软件解决方案。可以在任何兼容的 Web 浏览器中获得 Plant SCADA 的真正价值和强大功能。
AVEVA Plant SCADA and AVEVA Telemetry Server 存在授权问题漏洞。未经身份验证的攻击者利用该漏洞可以读取数据、导致拒绝服务并篡改警报状态。
solution:Upgrade aveva aveva_plant_scada to a higher version than 2020r2,2020r2:update_10,2023,2023:update_10,and avoid the version 2020r2,2020r2:update_10,2023,2023:update_10; Upgrade aveva telemetry_server to a higher version than 2020r2,2020r2:sp1,and avoid the version 2020r2,2020r2:sp1