High ICSA-21-231-01 6 CVEs

ICSA-21-231-01_AVEVA SuiteLink Server

Published Aug 19, 2021 · Updated Aug 19, 2021

Vendor: AVEVA Product: AVEVA Batch Management Product: AVEVA Communication Drivers Pack Product: AVEVA Data Acquisition Servers Product: AVEVA Historian Product: AVEVA InTouch Product: AVEVA MES Product: AVEVA Operations Integration Core Product: AVEVA System Platform

Summary

Sharon Brizinov of Claroty reported these vulnerabilities to AVEVA.

Vulnerabilities 6

High 8.1

CVE-2021-32959

AVEVA SuiteLink Server Buffer Overflow

Heap-based buffer overflow in SuiteLink server while processing commands 0x05/0x06

AVEVA AVEVA InTouch 2020 AVEVA Communication Drivers Pack 2020 AVEVA MES 2014

Sep 23, 2021
High 7.5

CVE-2021-32963

AVEVA SuiteLink Server Null Pointer Dereference

Null pointer dereference in SuiteLink server while processing commands 0x03/0x10

AVEVA AVEVA InTouch 2020 AVEVA Communication Drivers Pack 2020 AVEVA MES 2014

Sep 23, 2021
High 7.5

CVE-2021-32971

AVEVA SuiteLink Server Null Pointer Dereference

Null pointer dereference in SuiteLink server while processing command 0x07

AVEVA AVEVA InTouch 2020 AVEVA Communication Drivers Pack 2020 AVEVA MES 2014

Sep 23, 2021
High 7.5

CVE-2021-32979

AVEVA SuiteLink Server Null Pointer Dereference

Null pointer dereference in SuiteLink server while processing commands 0x04/0x0a

AVEVA AVEVA Communication Drivers Pack 2020 AVEVA MES 2014 AVEVA System Platform 2020

Sep 23, 2021
High 7.5

CVE-2021-32987

AVEVA SuiteLink Server Null Pointer Dereference

Null pointer dereference in SuiteLink server while processing command 0x0b

AVEVA AVEVA InTouch 2020 AVEVA Communication Drivers Pack 2020 AVEVA MES 2014

Sep 23, 2021
High 7.5

CVE-2021-32999

AVEVA SuiteLink Server Improper Handling of Exceptional Conditions

Improper handling of exceptional conditions in SuiteLink server while processing command 0x01

AVEVA AVEVA InTouch 2020 AVEVA Communication Drivers Pack 2020 AVEVA MES 2014

Sep 23, 2021

Revision history

2021-08-19 #1
ICSA-21-231-01 AVEVA SuiteLink Server

References

ICS Advisory ICSA-21-231-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-21-231-01