← Database

CVE-2021-42796

CRITICAL CVSS: 9.8 Published: 2023-12-16 Modified: 2026-06-17

Description

An issue was discovered in ExecuteCommand() in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior that allows unauthenticated arbitrary commands to be executed.

Affected Platforms

Aveva Edge

Weakness Type

NVD-CWE-Other, CWE-78

References