CVE-2021-42833: Xylem Aquaview

High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A Use of Hardcoded Credentials vulnerability exists in AquaView versions 1.60, 7.x, and 8.x that could allow an authenticated local attacker to manipulate users and system settings.

Affected products

• Xylem Aquaview: from 7.0.0, before 8.0.1 (fixed in 8.0.1); version 1.60 only

Published 2022-02-07. Last modified 2026-06-17.