CVE-2021-42794

概要

参考情報

• aveva.com/en/products/edge · Product
• cisa.gov/news-events/ics-advisories/icsa-22-326-01 · Third Party Advisory
• exploit-db.com/docs/english/17254-connection-string-parameter-pollution-attacks.pdf · Exploit

edge のその他の脆弱性

• CVE-2021-42797高 7.5Path traversal vulnerability in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior allows an unauthenticated user to steal t…
• CVE-2021-42796緊急 9.8An issue was discovered in ExecuteCommand() in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior that allows unauthenticate…
• CVE-2023-34982高 7.1 This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with …
• CVE-2023-33873高 7.8 This privilege escalation vulnerability, if exploited, cloud allow a local OS-authenticated user with standard privileges to escalate to Sy…
• CVE-2018-17916緊急 9.8InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 SP2. A remote …