Skip to content
OpenAdvisories
High · 7.3 CVE-2021-38410 EUVD-2021-24862GHSA-w785-44wh-9wr3

AVEVA PCS Portal Uncontrolled Search Path Element

Published Jul 27, 2022 · Updated Apr 17, 2025 · Assigned by icscert

Description

AVEVA Software Platform Common Services (PCS) Portal versions 4.5.2, 4.5.1, 4.5.0, and 4.4.6 are vulnerable to DLL hijacking through an uncontrolled search path element, which may allow an attacker control to one or more locations in the search path.

Affected products

VendorProductAffectedFixed
AVEVA Platform Common Services (PCS) Portal 4.5.2, 4.5.1, 4.5.0, 4.4.6 —

Advisories 1

References