CVE-2021-38410
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2021
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
AVEVA PCS Portal Uncontrolled Search Path Element
AVEVA Software Platform Common Services (PCS) Portal versions 4.5.2, 4.5.1, 4.5.0, and 4.4.6 are vulnerable to DLL hijacking through an uncontrolled search path element, which may allow an attacker control to one or more locations in the search path.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Platform Common Services (PCS) Portal
- Vendor
- AVEVA
- Product
- Platform Common Services (PCS) Portal
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 4.5.2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.5.1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.5.0 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.4.6 | affected | Unavailable | Unavailable | Unavailable | None listed |