Critical ICSA-22-326-01 4 CVEs

AVEVA Edge

Published Nov 22, 2022 · Updated Nov 22, 2022

Vendor: AVEVA Product: AVEVA Edge 2020

Summary

Successful exploitation of these vulnerabilities could allow an attacker to insert malicious DLL files and trick the application into executing code.

Vulnerabilities 4

Critical 9.8

CVE-2021-42796

An issue was discovered in ExecuteCommand() in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior that …

Dec 16, 2023
Medium 5.3

CVE-2021-42794

An issue was discovered in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior. The application allows a…

Dec 16, 2023
Unscored —

CVE-2016-2542

Untrusted search path vulnerability in Flexera InstallShield through 2015 SP1 allows local users to gain privileges via…

Feb 24, 2016
Unscored —

CVE-2021-42797

Path traversal vulnerability in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior allows an unauthenti…

Dec 16, 2023

Revision history

2022-11-22 #1
Publication Date

References

ICS Advisory ICSA-22-326-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-22-326-01
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-22-326-01
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf