Lucene search
HistoryDec 16, 2023 - 1:15 a.m.
CVE-2021-42797
cve-2021-42797
path traversal vulnerability
aveva edge
indusoft web studio
unauthenticated user
windows access token
user account
external db resources
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
40.5%
Path traversal vulnerability in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior allows an unauthenticated user to steal the Windows access token of the user account configured for accessing external DB resources.
Affected configurations
Node
avevaedgeRange<2020
ORavevaedgeMatch2020-
ORavevaedgeMatch2020r2-
ORavevaedgeMatch2020r2sp1
Related
cvelist
cvelist
CVE-2021-42797
2023-12-16 00:00:00
prion
prion
Path traversal
2023-12-16 01:15:00
cnvd
cnvd
AVEVA Edge has an information disclosure vulnerability
2022-11-25 00:00:00
cve
cve
CVE-2021-42797
2023-12-16 01:15:07
ics
ics
AVEVA Edge
2022-11-22 12:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
40.5%
Related for NVD:CVE-2021-42797