CVSS 3.1
5.5 mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NCVE-2021-32942
Medium (5.5) in aveva. EPSS 0.2% chance of exploitation in the next 30 days.
The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all prior versions (WindowViewer) if an authorized, privileged user creates a diagnostic memory dump of the process and saves it to a non-protected location.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 7% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-312, CWE-316
- Published
- Modified
- Record from
- the NVD, synced
Affected
- aveva:intouch_2017
- aveva:intouch_2020