CVE-2021-42794

Description

An issue was discovered in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior. The application allows a client to provide a malicious connection string that could allow an adversary to port scan the LAN, depending on the hosts' responses.

Weakness classification

• nvd@nist.gov: NVD-CWE-noinfo

Primary references

• cve@mitre.org — Product
• cve@mitre.org — Third Party Advisory, US Government Resource
• cve@mitre.org — Exploit, Third Party Advisory, VDB Entry
• af854a3a-2127-422b-91ae-364da2661108 — Product
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry