What is the severity of CVE-2021-42794?

CVE-2021-42794 has been identified as a significant vulnerability that allows potential port scanning of the LAN.

How do I fix CVE-2021-42794?

To mitigate CVE-2021-42794, users should upgrade to a patched version of AVEVA Edge beyond version R2020.

What kind of attack does CVE-2021-42794 facilitate?

CVE-2021-42794 facilitates connection string parameter pollution attacks that could allow an adversary to conduct port scans.

Which versions of AVEVA Edge are affected by CVE-2021-42794?

CVE-2021-42794 affects AVEVA Edge versions R2020 and all prior versions.

Is there a workaround for CVE-2021-42794?

Currently, the most effective mitigation for CVE-2021-42794 is to upgrade the software to a version that addresses the vulnerability.

Vulnerability/
CVE-2021-42794

medium

5.3

CWE

200

16/12/2023

4/8/2024

CVE-2021-42794: Infoleak

First published: Sat Dec 16 2023(Updated: )

An issue was discovered in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior. The application allows a client to provide a malicious connection string that could allow an adversary to port scan the LAN, depending on the hosts' responses.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
AVEVA Edge
AVEVA Edge 2020 R2 SP1
AVEVA InduSoft Web Studio
AVEVA Edge 2020 R2 SP1	<2020
AVEVA Edge 2020 R2 SP1	=2020
AVEVA Edge 2020 R2 SP1	=2020-r2
AVEVA Edge 2020 R2 SP1	=2020-r2

Never miss a vulnerability like this again

Reference Links

Parent vulnerabilities

(Appears in the following advisories)

ICSA-22-326-01

Frequently Asked Questions

What is the severity of CVE-2021-42794?
CVE-2021-42794 has been identified as a significant vulnerability that allows potential port scanning of the LAN.
How do I fix CVE-2021-42794?
To mitigate CVE-2021-42794, users should upgrade to a patched version of AVEVA Edge beyond version R2020.
What kind of attack does CVE-2021-42794 facilitate?
CVE-2021-42794 facilitates connection string parameter pollution attacks that could allow an adversary to conduct port scans.
Which versions of AVEVA Edge are affected by CVE-2021-42794?
CVE-2021-42794 affects AVEVA Edge versions R2020 and all prior versions.
Is there a workaround for CVE-2021-42794?
Currently, the most effective mitigation for CVE-2021-42794 is to upgrade the software to a version that addresses the vulnerability.

agent/type
agent/first-publish-date
agent/author
agent/severity
agent/weakness
agent/references
agent/description
agent/event
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/trending
agent/source
agent/tags
collector/ics-cert-advisory
source/ICS
agent/software-canonical-lookup
agent/software-canonical-lookup-request
collector/nvd-api
vendor/aveva
canonical/aveva edge
canonical/aveva edge 2020 r2 sp1
canonical/aveva indusoft web studio
version/aveva edge 2020 r2 sp1/2020
version/aveva edge 2020 r2 sp1/2020-r2

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.