CVE-2021-32963highCWE-476

CVE-2021-32963: fallo de gravedad alta en AVEVA Batch Management 2020

AVEVA SuiteLink Server Null Pointer Dereference

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear AVEVA System Platform+ Monitorear AVEVA InTouch

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 7.5epss 1.0%
Null pointer dereference in SuiteLink server while processing commands 0x03/0x10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Productos afectados
AVEVA Software, LLC · AVEVA Batch Management 2020AVEVA Software, LLC · AVEVA Communication Drivers Pack 2020AVEVA Software, LLC · AVEVA Historian 2020AVEVA Software, LLC · AVEVA InTouch 2020AVEVA Software, LLC · AVEVA MES 2014AVEVA Software, LLC · AVEVA System Platform 2020
CVEs relacionadas — AVEVA Batch Management 2020

En el mismo producto, de las más peligrosas a las menos.

CVE-2021-32987HIGHAVEVA SuiteLink Server Null Pointer DereferenceEPSS 1.0%CVE-2021-32999HIGHAVEVA SuiteLink Server Improper Handling of Exceptional ConditionsEPSS 1.0%CVE-2021-32979HIGHAVEVA SuiteLink Server Null Pointer DereferenceEPSS 1.0%CVE-2021-32971HIGHAVEVA SuiteLink Server Null Pointer DereferenceEPSS 1.0%CVE-2021-32959HIGHAVEVA SuiteLink Server Buffer OverflowEPSS 0.9%