CVE-2021-33008: Aveva System Platform

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

AVEVA System Platform versions 2017 through 2020 R2 P01 does not perform any authentication for functionality that requires a provable user identity.

Affected products

• Aveva System Platform: from 2017, before 2020 (fixed in 2020); version 2020 only

Published 2022-04-04. Last modified 2026-06-17.