What’s Vulnerable › Vulnerabilities

CVE-2024-6619: Incorrect Permission Assignment for Critical Resource in Ocean Data Systems Dream Report

• Severity: high (CVSS 8.5 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-08-13 · updated 2026-06-17
• Weakness: CWE-732

Description

In Ocean Data Systems Dream Report, an incorrect permission vulnerability could allow a local unprivileged attacker to escalate their privileges and could cause a denial-of-service.

Affected products

• AVEVA Reports for Operations 2023: through 23.0.17795.1010
• Ocean Data Systems Dream Report 2023: through 23.0.17795.1010

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-24-226-08

Get alerted when CVE-2024-6619 or the next vulnerability affects your stack