CVE-2021-33010highCWE-248

CVE-2021-33010: high-severity vulnerability in AVEVA System Platform

AVEVA System Platform Uncaught Exception

Published · Updated

Follow this CVE+ Monitor AVEVA System Platform

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 1.1%
An exception is thrown from a function in AVEVA System Platform versions 2017 through 2020 R2 P01, but it is not caught, which may cause a denial-of-service condition.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
AVEVA · AVEVA System Platform
Related CVEs — AVEVA System Platform

In the same product, most dangerous first.

CVE-2021-32981HIGHAVEVA System Platform Path TraversalEPSS 1.2%CVE-2021-33008HIGHAVEVA System Platform Missing Authentication for Critical FunctionEPSS 1.2%CVE-2021-32977HIGHAVEVA System Platform Improper Verification of Cryptographic SignatureEPSS 0.6%CVE-2021-32985HIGHAVEVA System Platform Origin Validation ErrorEPSS 0.5%CVE-2022-0835HIGHAVEVA System Platform Cleartext Storage of Sensitive Information in MemoryEPSS 0.2%