CVEvulnerability

CVE-2021-38410

7.8 HIGH Published 2022-07-27 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-07-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.3 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-427

Description

AVEVA Software Platform Common Services (PCS) Portal versions 4.5.2, 4.5.1, 4.5.0, and 4.4.6 are vulnerable to DLL hijacking through an uncontrolled search path element, which may allow an attacker control to one or more locations in the search path.

Affected configurations

• aveva batch management 2020 • aveva enterprise data management 2020 • aveva manufacturing execution system 2020 • aveva mobile operator 2020 • aveva platform common services 4.4.6 • aveva platform common services 4.5.0 • aveva platform common services 4.5.1 • aveva platform common services 4.5.2 • aveva system platform 2020 • aveva work tasks 2020

Related

Weakness · CWE (1)

  • CWE-427 Uncontrolled Search Path Element weakness

References