CVE-2023-34348

CVE-2023-34348 is a denial-of-service vulnerability affecting AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior. An unauthenticated attacker can remotely crash the PI Message Subsystem, leading to service disruption. This vulnerability has a CVSS score of 7.5 (High), indicating it can be exploited over the network with low complexity and no user interaction, resulting in high availability impact. While the EPSS score is low and there is no evidence of active exploitation, nor publicly available exploit code or significant community discussion, organizations should still prioritize patching to mitigate the risk of service interruption.