PT-2022-5603 · Aveva · Aveva Edge

Published 2022-11-22 · Updated 2024-10-07 · CVE-2021-42796

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior

Description An issue was discovered in the ExecuteCommand() function that allows unauthenticated arbitrary commands to be executed. This is related to errors in access control management in the stadosvr.exe executable file of the AVEVA Edge SCADA system. Exploitation of this issue may allow a remote attacker to execute arbitrary code.

Recommendations For versions R2020 and prior, consider disabling the ExecuteCommand() function as a temporary workaround until a patch is available. Restrict access to the stadosvr.exe executable file to minimize the risk of exploitation.

Fix

Improper Access Control

OS Command Injection

Weakness Enumeration

CWE-284

CWE-78

Related Identifiers

BDU:2022-06966

CVE-2021-42796

Affected Products

Aveva Edge

References · 8

• https://osv.dev/vulnerability/CVE-2021-42796 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-42796 · Security Note
• https://bdu.fstec.ru/vul/2022-06966 · Security Note
• https://aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2022-006.pdf · Note
• https://aveva.com/en/products/edge · Note
• https://twitter.com/CVEnew/status/1735946009874923777 · Twitter Post
• https://t.me/cvenotify/64453 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-22-326-01 · Note