CVE-2021-32977

CVE-2021-32977 affects AVEVA System Platform versions 2017–2020 R2 P01 and describes improper verification of the cryptographic signature for data. Connected sources corroborate the issue and note the vulnerability’s CVSS context (e.g., CVSS v3 base 7.2 in ICS updates) and that exploitation is no...

CVE-2021-33008

Vulnerability context: CVE-2021-33008 affects AVEVA System Platform versions 2017 through 2020 R2 P01. The root cause is missing authentication for functionality requiring a provable user identity, enabling potential unauthorized access to critical functions. Impact is high (CVE has CVSSv3 base s...

CVE-2021-32981

CVE-2021-32981 affects AVEVA System Platform 2017–2020 R2 P01, where external input used to build a pathname can escape a restricted directory. Root cause: improper neutralization of path elements in the pathname, enabling path traversal (CWE-22). Impact is high for confidentiality, integrity, an...

CVE-2021-32985

AVEVA System Platform vulnerabilities CVE-2021-32985 (Origin Validation Error) affect System Platform 2017 through 2020 R2 P01. The issue arises from not properly verifying the source of data or communication, enabling potential compromise of data integrity, confidentiality, and availability. The...

CVE-2021-33010

CVE-2021-33010 concerns AVEVA System Platform. Connected documents confirm an uncaught exception in a function on versions 2017–2020 R2 P01 that may lead to a denial-of-service condition. The Red Hat/RedHat-linked and ICS advisories corroborate this issue as a Denial of Service vulnerability aris...