CVE-2021-32959: AVEVA SuiteLink Server Buffer Overflow
Published Sep 23, 2021
·Updated
Heap-based buffer overflow in SuiteLink server while processing commands 0x05/0x06
Affected Software
1 affected component
AVEVA SuiteLink<3.2.002
Remediation
Information
AVEVA recommends organizations evaluate the impact of these vulnerabilities based on their operational environment, architecture, and product implementation.
Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.
Please see AVEVA security bulletin AVEVA-2021-003 for more information.
Event History
Sep 23, 2021
CVE Published
via MITRE·01:32 PM
Data Sourced
via MITRE·01:32 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2021-32959?
CVE-2021-32959 is a heap-based buffer overflow vulnerability in the SuiteLink server while processing commands 0x05 and 0x06.
2
What is the severity of CVE-2021-32959?
CVE-2021-32959 has a severity rating of 9.8 (Critical).
3
Which software is affected by CVE-2021-32959?
Aveva Suitelink versions up to exclusive 3.2.002 are affected by CVE-2021-32959.
4
How does CVE-2021-32959 impact the affected software?
CVE-2021-32959 can lead to a heap-based buffer overflow in the SuiteLink server, resulting in potential remote code execution or denial of service.
5
Is there a fix available for CVE-2021-32959?
Yes, Aveva has released a security bulletin (SecurityBulletin_AVEVA-2021-003.pdf) with the necessary patches and mitigation steps to address CVE-2021-32959.