CVE-2021-42794: Aveva Edge

Medium severity, CVSS 5.3. EPSS: 1.2% chance of exploitation in the next 30 days.

An issue was discovered in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior. The application allows a client to provide a malicious connection string that could allow an adversary to port scan the LAN, depending on the hosts' responses.

Affected products

• Aveva Edge: before 2020 (fixed in 2020); version 2020 only

Published 2023-12-16. Last modified 2026-06-17.