CVE-2024-3467 is a high severity deserialization flaw in AVEVA PI Asset Framework Client that can run malicious code when a user imports attacker supplied XML into PI System Explorer. AVEVA fixes it in 2023 Patch 1 or later, or 2018 SP3 Patch 5 or later.
What's affected
Per the CISA advisory ICSA-24-163-03, the affected versions are PI Asset Framework Client 2023 and 2018 SP3 P04 and prior. The weakness is CWE-502 (deserialization of untrusted data).
The fix, per the same advisory: all affected versions can be fixed by upgrading to PI AF Client 2023 Patch 1 or later. As an alternative, 2018 SP3 P04 and prior can be fixed by deploying PI AF Client 2018 SP3 Patch 5 or later. Both are obtained from the OSIsoft Customer Portal. AVEVA's own bulletin is AVEVA-2024-004.
Source conflict on severity: the NVD record gives CVSS 7.8 (vector CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), while the CISA advisory gives a CVSS v3.1 base score of 7.3 (vector AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) and a CVSS v4 score of 7.0. Both are High, but the scores and the privileges needed differ, so check the vendor bulletin for your own risk assessment. The record's KEV flag is false, so CISA's Known Exploited Vulnerabilities catalog did not list it when this record was captured.
How to check if you're exposed
On each workstation or server that has PI System Explorer, open the application's about dialog and note the PI AF Client release and patch level. Compare it with the list above. Any 2023 install without Patch 1, and any 2018 SP3 install below Patch 5, needs the update.
Also find where XML files come from. The flaw needs a user to import XML supplied by an attacker, so it matters most where staff exchange configuration files by email or shared drives. You can also run a free in-browser dependency scan at gold.safeguard.sh/scan to see which known vulnerabilities touch the open source packages you ship.
Safeguard's reachability analysis helps with the next question, which is whether the vulnerable code is actually called in your application, so you can order the work sensibly.
What to do now
- Inventory PI AF Client installs and their patch levels.
- Upgrade to PI AF Client 2023 Patch 1 or later, or 2018 SP3 Patch 5 or later, from the OSIsoft Customer Portal.
- Run PI System Explorer as a least privilege account.
- Set a rule that XML is imported only from a trusted, verified source.
- Review AVEVA-2024-004 and CISA's ICS defence in depth guidance for your environment.
Why it matters
Deserialization turns stored data back into live objects. If an application does this with data from an untrusted source and does not limit what may be rebuilt, the source can influence what code runs. Here the data is XML imported into PI System Explorer, and the code runs with the privileges of the person who imported it.
That last detail is why AVEVA advises running PI System Explorer as a least privilege interactive account, and checking that the source of XML is trusted before importing it. Industrial sites should also follow CISA's usual guidance, which keeps control system networks off the internet and behind firewalls. The record's KEV flag is false, so CISA's Known Exploited Vulnerabilities catalog did not list it when this record was captured.
Try it yourself
Click through it at your own pace, or open it full screen.
Quick check
Is this a remote attack?
The vector is local with user interaction. Someone must be persuaded to import attacker supplied XML, so process and training are part of the fix.
Sources
Last reviewed: 19 October 2026.
