Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2021-38410

AVEVA PCS Portal Uncontrolled Search Path Element

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

AVEVA Software Platform Common Services (PCS) Portal versions 4.5.2, 4.5.1, 4.5.0, and 4.4.6 are vulnerable to DLL hijacking through an uncontrolled search path element, which may allow an attacker control to one or more locations in the search path.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AVEVA Platform Common Services (PCS) Portal

  • 4.5.2affected
  • 4.5.1affected
  • 4.5.0affected
  • 4.4.6affected

References