CVE-2024-3467: High Deserialization Flaw in AVEVA PI AF Client
CVE-2024-3467 is a high severity deserialization flaw in AVEVA PI Asset Framework Client. Upgrade to 2023 Patch 1 or 2018 SP3 Patch 5 or later.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
CVE-2024-3467 is a high severity deserialization flaw in AVEVA PI Asset Framework Client. Upgrade to 2023 Patch 1 or 2018 SP3 Patch 5 or later.
CVE-2024-3466 is a medium SQL injection in Laundry Management System 1.0. No fixed version is recorded, so restrict access and review the code.
CVE-2024-3465 is a medium SQL injection in Laundry Management System 1.0. No fixed version is recorded, so restrict access and review the code.
CVE-2024-3464 is a medium SQL injection in Laundry Management System 1.0. No fixed version is recorded, so restrict access and review the code.
CVE-2024-3460 is a high severity kiosk escape in KioWare for Windows through 8.34 via a logout timing window. No fix is recorded, so contact the vendor.
CVE-2024-3459 is a high severity kiosk escape in KioWare for Windows through 8.34 using PDF downloads. No fix is recorded, so contact the vendor.
CVE-2024-3458 is a medium SQL injection in NS-ASG Application Security Gateway 6.3. No fixed version is recorded, so restrict access and review the code.
CVE-2024-3457 is a medium SQL injection in NS-ASG Application Security Gateway 6.3. No fixed version is recorded, so restrict access and review the code.
CVE-2024-3456 is a medium SQL injection in NS-ASG Application Security Gateway 6.3. No fixed version is recorded, so restrict access and review the code.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.