Security Resilience

CVE-2023-1256

Aveva Plant Scada 2020r2 … 2023

Published
16 March 2023
Modified
21 November 2024
CVSS Score v3.1 9.8
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0068 51th percentile
Risk Priority 72 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2023-1256 is a critical-severity an unspecified weakness vulnerability in Aveva Aveva Plant Scada. Its CVSS base score is 9.8 (Critical).

Operationally, ranked in the top 49% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

The listed versions of AVEVA Plant SCADA and AVEVA Telemetry Server are vulnerable to an improper authorization exploit which could allow an unauthenticated user to remotely read data, cause denial of service, and tamper with alarm states.

CWE(s)
None listed

Related Threats

CVEs Like This One

CVE-2023-34982Same product: Aveva Telemetry Server
CVE-2023-33873Same product: Aveva Telemetry Server
CVE-2025-61943Same vendor: Aveva
CVE-2025-61937Same vendor: Aveva
CVE-2025-64691Same vendor: Aveva
CVE-2023-6132Same vendor: Aveva
CVE-2025-64769Same vendor: Aveva
CVE-2025-64729Same vendor: Aveva
CVE-2023-31274Same vendor: Aveva
CVE-2024-3467Same vendor: Aveva

Affected Assets

aveva
aveva plant scada
2020r2, 2023
aveva
telemetry server
2020r2

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References