AVEVA System Platform versions 2017 through 2020 R2 P01 does not verify, or incorrectly verifies, the cryptographic signature for data.
Weakness
The product does not verify, or incorrectly verifies, the cryptographic signature for data.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| System_platform | Aveva | 2017 (including) | 2020 (excluding) |
| System_platform | Aveva | 2020 (including) | 2020 (including) |
| System_platform | Aveva | 2020-r2 (including) | 2020-r2 (including) |
| System_platform | Aveva | 2020-r2_p01 (including) | 2020-r2_p01 (including) |
Related Attack Patterns
References
- https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2021-002.pdf
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-180-05
- https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2021-002.pdf
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-180-05