CVE-2021-32985 : What You Need to Know

AVEVA System Platform Origin Validation Error is a vulnerability affecting versions 2017 through 2020 R2 P01. This CVE highlights the failure to properly verify the validity of data or communication sources.

Understanding CVE-2021-32985

This section will delve into what CVE-2021-32985 entails, its impact, technical details, and mitigation techniques.

What is CVE-2021-32985?

The vulnerability in AVEVA System Platform allows attackers to exploit inadequate validation of data or communication sources, leading to potential security breaches.

The Impact of CVE-2021-32985

With a CVSS base score of 7.2 out of 10, this high-severity vulnerability can result in significant confidentiality, integrity, and availability impacts on affected systems.

Technical Details of CVE-2021-32985

Let's explore the technical aspects of CVE-2021-32985, including vulnerability description, affected systems, versions, and exploitation mechanisms.

Vulnerability Description

AVEVA System Platform versions 2017 through 2020 R2 P01 fail to adequately verify the source of data or communication, opening up opportunities for malicious exploitation.

Affected Systems and Versions

The vulnerability affects AVEVA System Platform versions 2017, with the highest impacted version being 2020 R2 P01.

Exploitation Mechanism

Exploiting this vulnerability requires a low attack complexity and can be performed over a network without user interaction, indicating a severe threat to system availability, confidentiality, and integrity.

Mitigation and Prevention

Discover how to protect your systems from CVE-2021-32985 through immediate steps, long-term security practices, and essential patching and updates.

Immediate Steps to Take

AVEVA recommends disabling the AutoBuild service on Runtime nodes if not in use and upgrading affected System Platform versions to apply corresponding security updates.

Long-Term Security Practices

Organizations should regularly evaluate their operational environments and implement recommended security measures to strengthen resilience against similar vulnerabilities.

Patching and Updates

Applying AVEVA Communication Drivers Pack 2020 R2.1 to the impacted System Platform versions 2017 through 2020 R2 P01 is crucial for mitigating the risk of exploitation. Access AVEVA's security bulletin AVEVA-2021-002 for detailed instructions.