CVE-2021-42796

CVSS 9.8 CRITICALEPSS 1.1%CWE-78

Vexday Risk Score

28Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 9.8EPSS 1.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

16 dic 2023Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

An issue was discovered in ExecuteCommand() in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior that allows unauthenticated arbitrary commands to be executed.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Productos afectados

n/a · n/a

Referencias

https://www.aveva.com/en/products/edge/https://www.cisa.gov/news-events/ics-advisories/icsa-22-326-01