Skip to content
OpenAdvisories
High · 8.8 CVE-2021-33008 EUVD-2021-19729GHSA-97q6-8ff5-f4g2

AVEVA System Platform Missing Authentication for Critical Function

Published Apr 4, 2022 · Updated Apr 16, 2025 · Assigned by icscert

Vendor: AVEVA Product: AVEVA System Platform

Description

AVEVA System Platform versions 2017 through 2020 R2 P01 does not perform any authentication for functionality that requires a provable user identity.

Affected products

VendorProductAffectedFixed
AVEVA AVEVA System Platform 2017 – ≤ 2020 R2 P01 —

Advisories 1

References