← Database

CVE-2021-42794

MEDIUM CVSS: 5.3 Published: 2023-12-16 Modified: 2026-06-17

Description

An issue was discovered in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior. The application allows a client to provide a malicious connection string that could allow an adversary to port scan the LAN, depending on the hosts' responses.

Affected Platforms

Aveva Edge

Weakness Type

NVD-CWE-noinfo

References