CVE-2021-33008

Опубликовано: 04 апр. 2022

Источник: nvd

CVSS3: 8.8

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

AVEVA System Platform versions 2017 through 2020 R2 P01 does not perform any authentication for functionality that requires a provable user identity.

Конфигурация 1

Одно из

cpe:2.3:a:aveva:system_platform:*:*:*:*:*:*:*:*

Версия от 2017 (включая) до 2020 (исключая)

cpe:2.3:a:aveva:system_platform:2020:-:*:*:*:*:*:*

cpe:2.3:a:aveva:system_platform:2020:r2:*:*:*:*:*:*

cpe:2.3:a:aveva:system_platform:2020:r2_p01:*:*:*:*:*:*

EPSS

Процентиль: 40%

0.00178

Низкий

8.8 High

CVSS3

9.8 Critical

CVSS3

7.5 High

CVSS2

CWE-306

GHSA-97q6-8ff5-f4g2

CVSS3: 9.8

github

почти 4 года назад

AVEVA System Platform versions 2017 through 2020 R2 P01 does not perform any authentication for functionality that requires a provable user identity.

EPSS

Процентиль: 40%

0.00178

Низкий

8.8 High

CVSS3

9.8 Critical

CVSS3

7.5 High

CVSS2

CWE-306