CVE:CVE-2021-32985
CNNVD:CNNVD-202107-2080
AVEVA System Platform是英国AVEVA公司的一个应用软件。用于监管、企业 SCADA、MES 和 IIoT 应用程序的响应迅速、标准驱动且可扩展的基础。
AVEVA System Platform 存在访问控制错误漏洞，该漏洞源于软件不能正确地验证数据或通信的来源是有效的。
solution:Upgrade aveva system_platform to a higher version than 2020,2020,2020:r2,2020:r2_p01,and avoid the version [2017,2020),2020,2020:r2,2020:r2_p01