Skip to content
OpenAdvisories
High ICSA-21-180-05 5 CVEs

AVEVA System Platform (Update A)

Published Jun 29, 2021 · Updated Jul 27, 2021 · Revision 2

Vendor: AVEVA Product: AVEVA System Platform

Summary

Successful exploitation of these vulnerabilities, if exploited and chained together, could allow a malicious entity to achieve arbitrary code execution with system privileges or cause a denial-of-service condition.

Vulnerabilities 5

  • High 8.8
    CVE-2021-33008

    AVEVA System Platform Missing Authentication for Critical Function

    AVEVA System Platform versions 2017 through 2020 R2 P01 does not perform any authentication for functionality that requires a provable user identity.

    AVEVA AVEVA System Platform
  • High 7.5
    CVE-2021-33010

    AVEVA System Platform Uncaught Exception

    An exception is thrown from a function in AVEVA System Platform versions 2017 through 2020 R2 P01, but it is not caught, which may cause a denial-of-service condition.

    AVEVA AVEVA System Platform
  • High 7.2
    CVE-2021-32977

    AVEVA System Platform Improper Verification of Cryptographic Signature

    AVEVA System Platform versions 2017 through 2020 R2 P01 does not verify, or incorrectly verifies, the cryptographic signature for data.

    AVEVA AVEVA System Platform
  • High 7.2
    CVE-2021-32981

    AVEVA System Platform Path Traversal

    AVEVA System Platform versions 2017 through 2020 R2 P01 uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize specia…

    AVEVA AVEVA System Platform
  • High 7.2
    CVE-2021-32985

    AVEVA System Platform Origin Validation Error

    AVEVA System Platform versions 2017 through 2020 R2 P01 does not properly verify that the source of data or communication is valid.

    AVEVA AVEVA System Platform

Revision history

  1. #2

    ICSA-21-180-05 AVEVA System Platform (Update A)

  2. #1

    ICSA-21-180-05 AVEVA System Platform

References