AVEVA Process Optimization Cleartext Transmission Vulnerability

A vulnerability exists in the AVEVA Process Optimization application suite due to the use of unencrypted connection channels and protocols. This flaw could lead to hijacking or data leakage under certain man-in-the-middle or passive inspection scenarios. The vulnerability affects all versions of AVEVA Process Optimization prior to 2024.1.

Impact

Exploitation of this vulnerability could result in interception and unauthorized access to sensitive information transmitted over the connection channels.

Remediation

Users are advised to update to AVEVA Process Optimization version 2024.1 or later. For guidance on updating, refer to the AVEVA Cyber Security Updates page.