Vulnetix
Try Vulnetix Request Demo
CVE-2021-42797 PUBLISHED CVSS 7.5 HIGH

Path traversal vulnerability in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior allows an unauthenticated user to steal the Windows access token of the user account configured for accessing external DB resources.

EPSS 0.22% · 44.0th percentile

Risk Scores

CVSS v3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.22%
44.0th percentile

Affected Products

VendorProductVersions
n/an/an/a
avevaedge0, 2020, 2020

Timeline

References

Open in Interactive Console →