CVE-2021-42796: OS Command Injection
Published Dec 16, 2023
·Updated
An issue was discovered in ExecuteCommand() in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior that allows unauthenticated arbitrary commands to be executed.
Affected Software
7 affected components
AVEVA Edge 2020 R2 SP1
AVEVA Edge 2020 R2 SP1 w/ HF 2020.2.00.40
AVEVA Edge 2020 R2 and all prior versions (formerly known as InduSoft Web Studio)
AVEVA Edge<2020
AVEVA Edge=2020
AVEVA Edge=2020-r2
AVEVA Edge=2020-r2
Event History
Dec 16, 2023
CVE Published
12:00 AM
Data Sourced
12:00 AM
Description
May 9, 2024
Data Sourced
via ICS·10:29 PM
SeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-42796?
CVE-2021-42796 has a severity rating of critical due to the potential for unauthorized command execution.
2
How do I fix CVE-2021-42796?
To fix CVE-2021-42796, upgrade to a later version of AVEVA Edge that addresses this vulnerability.
3
What versions of AVEVA Edge are affected by CVE-2021-42796?
CVE-2021-42796 affects AVEVA Edge versions R2020 and prior.
4
Can CVE-2021-42796 be exploited remotely?
Yes, CVE-2021-42796 can be exploited remotely as it allows unauthenticated command execution.
5
What type of attack is possible with CVE-2021-42796?
CVE-2021-42796 allows for arbitrary command execution, which can lead to system compromise.