Skip to content
OpenAdvisories
High ICSA-21-252-01 1 CVE

AVEVA PCS Portal

Published Sep 9, 2021 · Updated Sep 9, 2021

Vendor: AVEVA Product: PCS

Summary

The DLL hijacking vulnerability in the Platform Common Services (PCS) Portal, if exploited, could allow malicious code execution within the context of the PCS Portal application.

Vulnerabilities 1

  • High 7.3
    CVE-2021-38410

    AVEVA PCS Portal Uncontrolled Search Path Element

    AVEVA Software Platform Common Services (PCS) Portal versions 4.5.2, 4.5.1, 4.5.0, and 4.4.6 are vulnerable to DLL hijacking through an uncontrolled search path element, which may allow an attacker control to one or more locations in the search path.

    AVEVA Platform Common Services (PCS) Portal

Revision history

  1. #1

    ICSA-21-252-01 AVEVA PCS Portal

References