The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all prior versions (WindowViewer) if an authorized, privileged user creates a diagnostic memory dump of the process and saves it to a non-protected location.
References
| Link | Resource |
|---|---|
| https://us-cert.cisa.gov/ics/advisories/icsa-21-159-03 | Patch Third Party Advisory US Government Resource |
| https://www.aveva.com/en/support/cyber-security-updates/ | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
25 Oct 2022, 19:38
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-312 |
21 Jun 2021, 16:27
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:aveva:intouch_2020:r2:*:*:*:*:*:*:* cpe:2.3:a:aveva:intouch_2017:-:update3:*:*:*:*:*:* cpe:2.3:a:aveva:intouch_2020:-:*:*:*:*:*:*:* |
|
| CWE | CWE-316 | |
| CVSS |
v2 : v3 : |
v2 : 2.1
v3 : 5.5 |
| References | (MISC) https://www.aveva.com/en/support/cyber-security-updates/ - Patch, Vendor Advisory | |
| References | (MISC) https://us-cert.cisa.gov/ics/advisories/icsa-21-159-03 - Patch, Third Party Advisory, US Government Resource |
09 Jun 2021, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-06-09 17:15
Updated : 2024-02-04 21:47
NVD link : CVE-2021-32942
Mitre link : CVE-2021-32942
CVE.ORG link : CVE-2021-32942
JSON object : View
Products Affected
aveva
- intouch_2020
- intouch_2017