PT-2022-10177 · Aveva · Aveva System Platform

Sharon Brizinov · Published 2022-04-04 · Updated 2022-04-13 · CVE-2021-32985

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AVEVA System Platform versions 2017 through 2020 R2 P01

Description The issue arises from the software's failure to properly verify the source of data or communication, which can lead to potential security risks.

Recommendations For AVEVA System Platform versions 2017 through 2020 R2 P01, update to a version that properly verifies the source of data or communication to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Origin Validation Error

Weakness Enumeration

CWE-346

Related Identifiers

CVE-2021-32985

Affected Products

Aveva System Platform

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2021-32985 · Security Note
• https://aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2021-002.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-32985 · Vendor Advisory
• https://t.me/cibsecurity/40129 · Telegram Post
• https://t.me/cvenotify/28826 · Telegram Post
• https://cisa.gov/uscert/ics/advisories/icsa-21-180-05 · Note