ICSA-21-231-01

icsaUScisa_csaf_ot

ICSA-21-231-01_AVEVA SuiteLink Server

Advisory ansehen veröffentlicht 2021-08-19

Sharon Brizinov of Claroty reported these vulnerabilities to AVEVA.

01

beschreibt (6)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2021-32999UShigh7.5—
Improper handling of exceptional conditions in SuiteLink server while processing command 0x01
CVE-2021-32987UShigh7.5—
Null pointer dereference in SuiteLink server while processing command 0x0b
CVE-2021-32979UShigh7.5—
Null pointer dereference in SuiteLink server while processing commands 0x04/0x0a
CVE-2021-32971UShigh7.5—
Null pointer dereference in SuiteLink server while processing command 0x07
CVE-2021-32963UShigh7.5—
Null pointer dereference in SuiteLink server while processing commands 0x03/0x10
CVE-2021-32959UScritical9.8—
Heap-based buffer overflow in SuiteLink server while processing commands 0x05/0x06
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (48)

  • MitigationAVEVA Batch Management

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Batch Management

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Batch Management

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Batch Management

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Batch Management

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Batch Management

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Communication Drivers Pack

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Communication Drivers Pack

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Communication Drivers Pack

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Communication Drivers Pack

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Communication Drivers Pack

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Communication Drivers Pack

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Data Acquisition Servers

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Data Acquisition Servers

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Data Acquisition Servers

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Data Acquisition Servers

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Data Acquisition Servers

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Data Acquisition Servers

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Historian

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Historian

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Historian

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Historian

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Historian

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Historian

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA InTouch

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA InTouch

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA InTouch

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA InTouch

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA InTouch

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA InTouch

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA MES

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA MES

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA MES

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA MES

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA MES

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA MES

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Operations Integration Core

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Operations Integration Core

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Operations Integration Core

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Operations Integration Core

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Operations Integration Core

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Operations Integration Core

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA System Platform

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA System Platform

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA System Platform

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA System Platform

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA System Platform

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA System Platform

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan