← All advisories

High severity8.8NVD Advisory· Published Apr 4, 2022· Updated Jun 17, 2026

CVE-2021-33008

CVE-2021-33008

Description

AVEVA System Platform versions 2017 through 2020 R2 P01 does not perform any authentication for functionality that requires a provable user identity.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6

Aveva/System Platform5 versions
cpe:2.3:a:aveva:system_platform:*:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:aveva:system_platform:*:*:*:*:*:*:*:*range: >=2017,<2020
- cpe:2.3:a:aveva:system_platform:2020:-:*:*:*:*:*:*
- cpe:2.3:a:aveva:system_platform:2020:r2:*:*:*:*:*:*
- cpe:2.3:a:aveva:system_platform:2020:r2_p01:*:*:*:*:*:*
- (no CPE)range: 2017 - 2020 R2 P01
AVEVA/AVEVA System Platformv5
Range: 2017

Patches

Vulnerability mechanics

References

2

www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2021-002.pdfnvdVendor Advisory
www.cisa.gov/uscert/ics/advisories/icsa-21-180-05nvdThird Party AdvisoryUS Government Resource

News mentions

0

No linked articles in our index yet.