VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Dec 16, 2023· Updated Jun 17, 2026

CVE-2021-42796

CVE-2021-42796

Description

An issue was discovered in ExecuteCommand() in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior that allows unauthenticated arbitrary commands to be executed.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Aveva/Edge5 versions
    cpe:2.3:a:aveva:edge:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:aveva:edge:*:*:*:*:*:*:*:*range: <2020
    • cpe:2.3:a:aveva:edge:2020:-:*:*:*:*:*:*
    • cpe:2.3:a:aveva:edge:2020:r2:-:*:*:*:*:*
    • cpe:2.3:a:aveva:edge:2020:r2:sp1:*:*:*:*:*
    • (no CPE)range: <=R2020
  • AVEVA Edge/AVEVA Edgedescription
  • Indusoft/Web Studiollm-fuzzy
    Range: <=R2020

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.