CVE-2021-42794

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

An issue was discovered in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior. The application allows a client to provide a malicious connection string that could allow an adversary to port scan the LAN, depending on the hosts' responses.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Dec 16, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-427969.8An issue was discovered in ExecuteCommand() in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior that allows unauthenticateCVE-2021-427977.5Path traversal vulnerability in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior allows an unauthenticated user to steal tCVE-2021-42806.5A vulnerability was found in styler_praat_scripts. It has been classified as problematic. Affected is an unknown function of the file file_sCVE-2021-428086.7Improper Access Control in Thales Sentinel Protection Installer could allow a local user to escalate privileges.CVE-2021-428097.8Improper Access Control of Dynamically-Managed Code Resources (DLL) in Thales Sentinel Protection Installer could allow the execution of arbCVE-2021-42819.8A vulnerability was found in Brave UX for-the-badge and classified as critical. Affected by this issue is some unknown functionality of the CVE-2021-428107.8A flaw in the previous versions of the product may allow an authenticated attacker the ability to execute code as a privileged user on a sysCVE-2021-428116.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in SafeNet KeySecure allows an authenticated usCVE-2021-42826.1A vulnerability was found in FreePBX voicemail. It has been declared as problematic. Affected by this vulnerability is an unknown functionalCVE-2021-42835.4A vulnerability was found in FreeBPX voicemail. It has been rated as problematic. Affected by this issue is some unknown functionality of thCVE-2021-428338.8A Use of Hardcoded Credentials vulnerability exists in AquaView versions 1.60, 7.x, and 8.x that could allow an authenticated local attackerCVE-2021-428357.0An issue was discovered in Plex Media Server through 1.24.4.5081-e362dc1ee. An attacker (with a foothold in a endpoint via a low-privileged
CVE-2021-42794: Medium severity, CVSS 5.3 | Vulnix