Critical · 9.8 CVE-2021-42796 EUVD-2021-29752GHSA-w96c-3jm7-32vm

An issue was discovered in ExecuteCommand() in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior that allows unauthenticat…

Published Dec 16, 2023 · Updated Oct 7, 2024 · Assigned by mitre

Description

An issue was discovered in ExecuteCommand() in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior that allows unauthenticated arbitrary commands to be executed.

Advisories 1

ICSA-22-326-01 AVEVA Edge CISA ICS & IT advisories · Nov 22, 2022

References

https://www.aveva.com/en/products/edge/
https://www.cisa.gov/news-events/ics-advisories/icsa-22-326-01