CVE-2021-32971highCWE-476

CVE-2021-32971: high-severity vulnerability in AVEVA Batch Management 2020

AVEVA SuiteLink Server Null Pointer Dereference

Published · Updated

Follow this CVE+ Monitor AVEVA System Platform+ Monitor AVEVA InTouch

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 1.0%
Null pointer dereference in SuiteLink server while processing command 0x07
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
AVEVA Software, LLC · AVEVA Batch Management 2020AVEVA Software, LLC · AVEVA Communication Drivers Pack 2020AVEVA Software, LLC · AVEVA Historian 2020AVEVA Software, LLC · AVEVA InTouch 2020AVEVA Software, LLC · AVEVA MES 2014AVEVA Software, LLC · AVEVA System Platform 2020
Related CVEs — AVEVA Batch Management 2020

In the same product, most dangerous first.

CVE-2021-32987HIGHAVEVA SuiteLink Server Null Pointer DereferenceEPSS 1.0%CVE-2021-32999HIGHAVEVA SuiteLink Server Improper Handling of Exceptional ConditionsEPSS 1.0%CVE-2021-32979HIGHAVEVA SuiteLink Server Null Pointer DereferenceEPSS 1.0%CVE-2021-32963HIGHAVEVA SuiteLink Server Null Pointer DereferenceEPSS 1.0%CVE-2021-32959HIGHAVEVA SuiteLink Server Buffer OverflowEPSS 0.9%