PT-2021-19989 · Unknown · Webaccess/Scada

Chizuru Toyama · Published 2021-08-10 · Updated 2021-08-17 · CVE-2021-32943

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WebAccess/SCADA versions prior to 8.4.5 WebAccess/SCADA versions prior to 9.0.1

Description The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code on the WebAccess/SCADA.

Recommendations For versions prior to 8.4.5, update to version 8.4.5 or later. For versions prior to 9.0.1, update to version 9.0.1 or later.

Fix

Memory Corruption

Stack Overflow

Weakness Enumeration

CWE-787

CWE-121

Related Identifiers

CVE-2021-32943

Affected Products

Webaccess/Scada

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-32943 · Security Note
• https://osv.dev/vulnerability/CVE-2021-32943 · Vendor Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-21-217-04 · Note
• https://t.me/cvenotify/19007 · Telegram Post
• https://t.me/cibsecurity/27067 · Telegram Post