ED
Product
Edge
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 4Medium 1Low 0
Watch
Add Edge to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-42796 | 9.8 | Dec 16 | An issue was discovered in ExecuteCommand() in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior that allows unauthenticated arbitrary commands to be executed Affected: before 2020; 2020; 2020; 2020 |
| CVE-2018-17916 | 9.8 | Nov 2 | InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 SP2 Affected: 8.1; 8.1 |
| CVE-2018-17914 | 9.8 | Nov 2 | InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 SP2 Affected: 8.1; 8.1 |
| CVE-2025-9317 | 8.4 | Nov 14 | AVEVA Edge Use of a Broken or Risky Cryptographic Algorithm Affected: through Versions 2023 R2 |
| CVE-2023-33873 | 7.8 | Nov 15 | This privilege escalation vulnerability, if exploited, cloud allow a local OS-authenticated user with standard privileges to escalate to System privilege on the machine where… Affected: through 20.1.101 |
| CVE-2021-42797 | 7.5 | Dec 16 | Path traversal vulnerability in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior allows an unauthenticated user to steal the Windows access token of the user… Affected: before 2020; 2020; 2020; 2020 |
| CVE-2023-34982 | 7.1 | Nov 15 | This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where… Affected: through 20.1.101 |
| CVE-2021-42794 | 5.3 | Dec 16 | An issue was discovered in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior Affected: before 2020; 2020; 2020; 2020 |
Showing 8
