CVE-2021-38410

Published: Jul 27, 2022Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

AVEVA Software Platform Common Services (PCS) Portal versions 4.5.2, 4.5.1, 4.5.0, and 4.4.6 are vulnerable to DLL hijacking through an uncontrolled search path element, which may allow an attacker control to one or more locations in the search path.

Affected (13)

Products: Aveva: Batch Management, Enterprise Data Management, Manufacturing Execution System, Mobile Operator, Platform Common Services, System Platform, Work Tasks

Aveva

7 products

Batch Management

Enterprise Data Management

Manufacturing Execution System

Mobile Operator

Platform Common Services

System Platform

Work Tasks

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Aveva Batch Management	Version 2020
Aveva Enterprise Data Management	Version 2020
Aveva Manufacturing Execution System	Version 2020
Aveva Mobile Operator	Version 2020
Aveva Platform Common Services	Version 4.4.6
Aveva Platform Common Services	Version 4.5.0
Aveva Platform Common Services	Version 4.5.1
Aveva Platform Common Services	Version 4.5.2
Aveva System Platform	Version 2020
Aveva System Platform	Version 2020 r2
Aveva System Platform	Version 2020 r2_p01
Aveva Work Tasks	Version 2020
Aveva Work Tasks	Version 2020 update_1