CVE-2021-42796: Aveva Edge

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

An issue was discovered in ExecuteCommand() in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior that allows unauthenticated arbitrary commands to be executed.

Affected products

• Aveva Edge: before 2020 (fixed in 2020); version 2020 only

Published 2023-12-16. Last modified 2026-06-17.