AVEVA System Platform

1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Low attack complexity Vendor: AVEVA Equipment: System Platform Vulnerability: Cleartext Storage of Sensitive Information in Memory 2. RISK EVALUATION Successful exploitation of this vulnerability could expose cleartext credentials for the network user...

Vulnerabilities fixed in AVEVA System Platform

Vulnerabilities have been fixed in AVEVA System Platform. A malicious party could exploit the vulnerabilities to obtain sensitive information, namely the plaintext password of the Network User Account. With this information, the malicious party could gain further access to systems. No CVE feature...

The vulnerability of the AVEVA System Platform, a software for managing production processes; AVEVA WorkTasks, software for decision-making support on mobile devices; AVEVA Mobile Operator, a system for operational production management; AVEVA Manufacturing Execution System, software for integrated production management; AVEVA Batch Management, software for batch-based production control; AVEVA Enterprise Data Management, a software platform for enterprise data management. This vulnerability is related to an uncontrolled element in the search process, allowing attackers to escalate their privileges.

The vulnerabilities of the AVEVA System Platform, which is used for dispatching control applications; AVEVA WorkTasks, which is software for managing production processes; AVEVA Mobile Operator, which is software for supporting decision-making on mobile devices; AVEVA Manufacturing Execution...

CVE-2021-32999 AVEVA SuiteLink Server Improper Handling of Exceptional Conditions

Improper handling of exceptional conditions in SuiteLink server while processing command 0x01...

CVE-2021-32979 AVEVA SuiteLink Server Null Pointer Dereference

Null pointer dereference in SuiteLink server while processing commands 0x04/0x0a...

CVE-2021-32959 AVEVA SuiteLink Server Buffer Overflow

Heap-based buffer overflow in SuiteLink server while processing commands 0x05/0x06...

CVE-2021-32963 AVEVA SuiteLink Server Null Pointer Dereference

Null pointer dereference in SuiteLink server while processing commands 0x03/0x10...

SuiteLink server 代码问题漏洞

Aveva Group SuiteLink Server is a communication server from Aveva Group, a UK-based company. A code issue vulnerability exists in SuiteLink server that stems from the product's mishandling of command 0x01...

Vulnerability fixed in AVEVA System Platform

A vulnerability has been fixed in Platform Common Services PCS Portal which is a component of AVEVA System Platform. It concerns a certain "DLL hijacking" vulnerability. A local malicious person could potentially exploit the vulnerability to execute arbitrary code execute with the privileges of t...

AVEVA System Platform 代码问题漏洞

AVEVA System Platform is an application from AVEVA UK. A responsive, standards-driven and scalable foundation for regulatory, enterprise SCADA, MES and IIoT applications. A code issue vulnerability exists in the AVEVA System Platform Common Services PCS Portal, which stems from the vulnerability ...

AVEVA PCS Portal

1. EXECUTIVE SUMMARY CVSS v3 7.3 ATTENTION: Low attack complexity Vendor: AVEVA Equipment: Platform Common Services PCS Portal Vulnerability: Uncontrolled Search Path Element 2. RISK EVALUATION The DLL hijacking vulnerability in the Platform Common Services PCS Portal, if exploited, could allow...

Vulnerabilities fixed in AVEVA products

AVEVA has fixed vulnerabilities in several products. The vulnerabilities allow a malicious party to perform a denial-of-service exploit. AVEVA categorizes these vulnerabilities according to the CVSSv3 method with a highest score of 8.1. AVEVA has released updates to fix the vulnerabilities. More...

Aveva SuiteLink Server 代码问题漏洞

Aveva SuiteLink Server is a communication server from AVEVA Aveva, UK. A code issue vulnerability exists in AVEVA SuiteLink Server that stems from a null pointer dereference in the SuiteLink Server when the SuiteLink Server handles command 0x03/0x10...

Aveva SuiteLink Server 代码问题漏洞

Aveva SuiteLink Server is a communication server from AVEVA Aveva UK. A code issue vulnerability exists in AVEVA SuiteLink Server that stems from a null pointer dereference in the SuiteLink Server when the SuiteLink Server processes command 0x07...

Aveva SuiteLink Server 缓冲区错误漏洞

Aveva SuiteLink Server is a communication server from AVEVA Aveva, UK. A buffer error vulnerability exists in AVEVA SuiteLink Server that originates from a heap-based buffer overflow in the SuiteLink Server when the SuiteLink Server processes command 0x05/0x06...

ICSA-21-231-01_AVEVA SuiteLink Server

1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: AVEVA Software, LLC Equipment: SuiteLink Server Vulnerabilities: Heap-based Buffer Overflow, Null Pointer Dereference, Improper Handling of Exceptional Conditions 2. RISK EVALUATION Successful...

Aveva SuiteLink Server 代码问题漏洞

Aveva SuiteLink Server is a communication server from AVEVA Aveva UK. A code issue vulnerability exists in Aveva SuiteLink Server that stems from a null pointer dereference in the SuiteLink Server when the SuiteLink Server processes command 0x0b...

Aveva SuiteLink Server 代码问题漏洞

Aveva SuiteLink Server is a communication server from AVEVA Aveva, UK. A code issue vulnerability exists in AVEVA SuiteLink Server that stems from a null pointer dereference in the SuiteLink Server when the SuiteLink Server handles command 0x04/0x0a...

AVEVA System Platform Path Traversal Vulnerability

AVEVA System Platform is an application from AVEVA UK. A responsive, standards-driven and scalable foundation for regulatory, enterprise SCADA, MES and IIoT applications. AVEVA System Platform suffers from a path traversal vulnerability that stems from the software not properly neutralizing speci...

AVEVA System Platform Incorrect Authentication Vulnerability

AVEVA System Platform is an application from AVEVA UK. responsive, standards-driven and scalable foundation for regulatory, enterprise SCADA, MES and IIoT applications. AVEVA System Platform has a security vulnerability that stems from the software not verifying or incorrectly verifying the...