CVE-2021-42796

2023-12-1600:00:00

mitre

www.cve.org

cve-2021-42796

aveva edge

executecommand

unauthenticated

arbitrary commands

AI Score

9.7

Confidence

High

EPSS

0.001

Percentile

39.1%

JSON

An issue was discovered in ExecuteCommand() in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior that allows unauthenticated arbitrary commands to be executed.

References

www.aveva.com/en/products/edge/

www.cisa.gov/news-events/ics-advisories/icsa-22-326-01