← back
CVE-2021-32942

CVE-2021-32942

CVSS 6.6 MEDIUMEPSS 0.2%CWE-316
The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all prior versions (WindowViewer) if an authorized, privileged user creates a diagnostic memory dump of the process and saves it to a non-protected location.
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
Affected products
AVEVA · InTouch

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://us-cert.cisa.gov/ics/advisories/icsa-21-159-03https://www.aveva.com/en/support/cyber-security-updates/