CVE-2023-34348

AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated user to remotely crash the PI Message Subsystem of a PI Server, resulting in a denial-of-service condition.

• CWE-703
• CWE-755
• CWE-754

• https://www.cisa.gov/news-events/ics-advisories/icsa-24-018-01Mitigation, Third Party Advisory, US Government Resource
• https://www.cisa.gov/news-events/ics-advisories/icsa-24-018-01Mitigation, Third Party Advisory, US Government Resource

Published

Jan 18, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-34342AMI BMC contains a vulnerability in the IPMI handler, where …9.1
• CVE-2023-34343AMI BMC contains a vulnerability in the SPX REST API, where …8.8
• CVE-2023-34344AMI BMC contains a vulnerability in the IPMI handler, where …5.3
• CVE-2023-34345AMI BMC contains a vulnerability in the SPX REST API, where …6.5
• CVE-2023-34346A stack-based buffer overflow vulnerability exists in the ht…9.8
• CVE-2023-34347 ​Delta Electronics InfraSuite Device Master versions prio…9.8
• CVE-2023-34349Race condition in some Intel(R) NUC BIOS firmware may allow …6.4
• CVE-2023-3435The User Activity Log WordPress plugin before 1.6.5 does not…9.8
• CVE-2023-34350Uncontrolled search path element in some Intel(R) XTU softwa…7.8
• CVE-2023-34351Buffer underflow in some Intel(R) PCM software before versio…7.5
• CVE-2023-34352A permissions issue was addressed with improved redaction of…5.3
• CVE-2023-34353An authentication bypass vulnerability exists in the OAS Eng…7.5