CVE-2021-42796

Summary

An issue was discovered in ExecuteCommand() in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior that allows unauthenticated arbitrary commands to be executed.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://www.aveva.com/en/products/edge/
• https://www.cisa.gov/news-events/ics-advisories/icsa-22-326-01

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: total

References

• https://www.aveva.com/en/products/edge/
• https://www.cisa.gov/news-events/ics-advisories/icsa-22-326-01

• ←Previous
• Next→