CVE-2023-31274

MEDIUM 5.3CVE-2023-31274 · Published 18/01/2024 · updated 17/06/2026

In short

CVE-2023-31274 is a MEDIUM (CVSS 5.3) vulnerability affecting pi server (aveva).
Chance of exploitation in the next 30 days (EPSS): 0.50%, higher than 43.0% of all vulnerabilities.
Fix: update to 2018 or later.

Package	Affected versions	Patched versions
pi server aveva	`= 2018= 2023< 2018`	`2018`

Description

AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated user to cause the PI Message Subsystem of a PI Server to consume available memory resulting in throttled processing of new PI Data Archive events and a partial denial-of-service condition.

References

cisa.gov/news-events/ics-advisories/icsa-24-018-01 · Mitigation

More vulnerabilities in pi server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free