CVE-2021-42794

Mô tả

Tham khảo

• aveva.com/en/products/edge · Product
• cisa.gov/news-events/ics-advisories/icsa-22-326-01 · Third Party Advisory
• exploit-db.com/docs/english/17254-connection-string-parameter-pollution-attacks.pdf · Exploit

Lỗ hổng khác của edge

• CVE-2021-42797CAO 7.5Path traversal vulnerability in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior allows an unauthenticated user to steal t…
• CVE-2021-42796NGHIÊM TRỌNG 9.8An issue was discovered in ExecuteCommand() in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior that allows unauthenticate…
• CVE-2023-34982CAO 7.1 This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with …
• CVE-2023-33873CAO 7.8 This privilege escalation vulnerability, if exploited, cloud allow a local OS-authenticated user with standard privileges to escalate to Sy…
• CVE-2018-17916NGHIÊM TRỌNG 9.8InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 SP2. A remote …