CVE-2021-32942: Aveva Intouch 2017

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all prior versions (WindowViewer) if an authorized, privileged user creates a diagnostic memory dump of the process and saves it to a non-protected location.

Affected products

• Aveva Intouch 2017: affected versions not specified
• Aveva Intouch 2020: affected versions not specified; version r2 only

Published 2021-06-09. Last modified 2026-06-17.