Paper/Archive/CVE-2021-32959

CVE-2021-32959

AVEVA Software, LLC AVEVA System Platform 2020 — AVEVA SuiteLink Server Buffer Overflow

Description · from the CVE record

Heap-based buffer overflow in SuiteLink server while processing commands 0x05/0x06

Affected

ProductAffectedFixed inSource
AVEVA System Platform 2020unspecified – R2 P01–CNA
AVEVA InTouch 2020unspecified – R2 P01–CNA
AVEVA Historian 2020unspecified – R2 P01–CNA
AVEVA Communication Drivers Pack 2020unspecified – R2–CNA
AVEVA Batch Management 2020unspecified – 2020–CNA
AVEVA MES 2014unspecified – R2–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
icscert (CNA)8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refaveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2021-003.pdf