Medium severity5.3NVD Advisory· Published Dec 16, 2023· Updated Jun 17, 2026

CVE-2021-42794

Description

An issue was discovered in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior. The application allows a client to provide a malicious connection string that could allow an adversary to port scan the LAN, depending on the hosts' responses.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Aveva/Edge5 versions
cpe:2.3:a:aveva:edge:*:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:aveva:edge:*:*:*:*:*:*:*:*range: <2020
- cpe:2.3:a:aveva:edge:2020:-:*:*:*:*:*:*
- cpe:2.3:a:aveva:edge:2020:r2:-:*:*:*:*:*
- cpe:2.3:a:aveva:edge:2020:r2:sp1:*:*:*:*:*
- (no CPE)range: <=R2020
AVEVA Edge/AVEVA Edgedescription
Indusoft/Web Studiollm-fuzzy
Range: <=R2020

Patches

Vulnerability mechanics

References

www.exploit-db.com/docs/english/17254-connection-string-parameter-pollution-attacks.pdfnvdExploitThird Party AdvisoryVDB Entry
www.cisa.gov/news-events/ics-advisories/icsa-22-326-01nvdThird Party AdvisoryUS Government Resource
www.aveva.com/en/products/edge/nvdProduct

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000