CVE-2021-32959highCWE-122

CVE-2021-32959: high-severity vulnerability in AVEVA Batch Management 2020

AVEVA SuiteLink Server Buffer Overflow

Published · Updated

Follow this CVE+ Monitor AVEVA System Platform+ Monitor AVEVA InTouch

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.1epss 0.9%
Heap-based buffer overflow in SuiteLink server while processing commands 0x05/0x06
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
AVEVA Software, LLC · AVEVA Batch Management 2020AVEVA Software, LLC · AVEVA Communication Drivers Pack 2020AVEVA Software, LLC · AVEVA Historian 2020AVEVA Software, LLC · AVEVA InTouch 2020AVEVA Software, LLC · AVEVA MES 2014AVEVA Software, LLC · AVEVA System Platform 2020
Related CVEs — AVEVA Batch Management 2020

In the same product, most dangerous first.

CVE-2021-32987HIGHAVEVA SuiteLink Server Null Pointer DereferenceEPSS 1.0%CVE-2021-32999HIGHAVEVA SuiteLink Server Improper Handling of Exceptional ConditionsEPSS 1.0%CVE-2021-32979HIGHAVEVA SuiteLink Server Null Pointer DereferenceEPSS 1.0%CVE-2021-32971HIGHAVEVA SuiteLink Server Null Pointer DereferenceEPSS 1.0%CVE-2021-32963HIGHAVEVA SuiteLink Server Null Pointer DereferenceEPSS 1.0%