High · 8.2 CVE-2021-32962 EUVD-2021-19683GHSA-xmq6-3r6w-66pw

Claroty Secure Remote Access Site - Authentication Bypass Using an Alternate Path or Channel

Published May 24, 2022 · Updated Apr 16, 2025 · Assigned by icscert

Vendor: AGG Software Product: Web Server (webserver.dll)

Description

The AGG Software Web Server version 4.0.40.1014 and prior is vulnerable to cross-site scripting, which may allow an attacker to remotely execute arbitrary code.

Affected products

Vendor	Product	Affected	Fixed
AGG Software	Web Server (webserver.dll)	All – ≤ v4.0.40.1014	—

Advisories 1

ICSA-21-161-02 AGG Software Web Server Plugin CISA ICS & IT advisories · Jun 10, 2021

References

https://www.cisa.gov/uscert/ics/advisories/icsa-21-161-02

CNA	v3.1	8.2
EUVD	v3.1	8.2