Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior. The application allows a client to provide a malicious connection string that could allow an adversary to port scan the LAN, depending on the hosts' responses.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
N/A
Vulnerability Title
AVEVA Edge 安全漏洞
Vulnerability Description
AVEVA Edge是英国剑维软件（AVEVA）公司的一款高度可扩展、灵活的 HMI/SCADA 软件。 AVEVA Edge 2020 R2版本存在安全漏洞，该漏洞源于其允许恶意实体与对文件系统的访问可以实现任意代码的执行和特权通过欺骗AVEVA Edge InstallShield包来加载一个不安全的DLL。
CVSS Information
N/A
Vulnerability Type
N/A