What’s Vulnerable › Vulnerabilities

CVE-2024-6618: Path Traversal in Ocean Data Systems Dream Report

• Severity: high (CVSS 8.5 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-08-13 · updated 2026-06-17
• Weakness: CWE-22

Description

In Ocean Data Systems Dream Report, a path traversal vulnerability could allow an attacker to perform remote code execution through the injection of a malicious dynamic-link library (DLL).

Affected products

• AVEVA Reports for Operations 2023: 23.0.17795.1010
• Ocean Data Systems Dream Report 2023: through 23.0.17795.1010

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-24-226-08

Get alerted when CVE-2024-6618 or the next vulnerability affects your stack