Read the docs
TI-2021-16014 Aliases CVE-2021-38410GHSA-w785-44wh-9wr3

AVEVA PCS Portal Uncontrolled Search Path Element

Priority LOW 35CWE-427Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-427.

Summary

AVEVA Software Platform Common Services (PCS) Portal versions 4.5.2, 4.5.1, 4.5.0, and 4.4.6 are vulnerable to DLL hijacking through an uncontrolled search path element, which may allow an attacker control to one or more locations in the search path.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00222 12th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
AVEVAPlatform Common Services (PCS) Portal4.5.2; 4.5.1; 4.5.0; 4.4.6—No fix listedCNA
  • Platform Common Services (PCS) Portal VendorAVEVA Affected 4.5.2; 4.5.1; 4.5.0; 4.4.6 Fixed in — No fix listed CNA

CPE configurations NVD · 13

CPEVersionsRoleVendor
cpe:2.3:a:aveva:batch_management:2020:*:*:*:*:*:*:*2020VulnerableAVEVA
cpe:2.3:a:aveva:enterprise_data_management:2020:*:*:*:*:*:*:*2020VulnerableAVEVA
cpe:2.3:a:aveva:manufacturing_execution_system:2020:*:*:*:*:*:*:*2020VulnerableAVEVA
cpe:2.3:a:aveva:mobile_operator:2020:*:*:*:*:*:*:*2020VulnerableAVEVA
cpe:2.3:a:aveva:platform_common_services:4.4.6:*:*:*:*:*:*:*4.4.6VulnerableAVEVA
cpe:2.3:a:aveva:platform_common_services:4.5.0:*:*:*:*:*:*:*4.5.0VulnerableAVEVA
cpe:2.3:a:aveva:platform_common_services:4.5.1:*:*:*:*:*:*:*4.5.1VulnerableAVEVA
cpe:2.3:a:aveva:platform_common_services:4.5.2:*:*:*:*:*:*:*4.5.2VulnerableAVEVA
cpe:2.3:a:aveva:system_platform:2020:-:*:*:*:*:*:*2020VulnerableAVEVA
cpe:2.3:a:aveva:system_platform:2020:r2:*:*:*:*:*:*2020 r2VulnerableAVEVA
  • cpe:2.3:a:aveva:batch_management:2020:*:*:*:*:*:*:* Versions 2020 Vulnerable ·AVEVA
  • cpe:2.3:a:aveva:enterprise_data_management:2020:*:*:*:*:*:*:* Versions 2020 Vulnerable ·AVEVA
  • cpe:2.3:a:aveva:manufacturing_execution_system:2020:*:*:*:*:*:*:* Versions 2020 Vulnerable ·AVEVA
  • cpe:2.3:a:aveva:mobile_operator:2020:*:*:*:*:*:*:* Versions 2020 Vulnerable ·AVEVA
  • cpe:2.3:a:aveva:platform_common_services:4.4.6:*:*:*:*:*:*:* Versions 4.4.6 Vulnerable ·AVEVA
  • cpe:2.3:a:aveva:platform_common_services:4.5.0:*:*:*:*:*:*:* Versions 4.5.0 Vulnerable ·AVEVA
  • cpe:2.3:a:aveva:platform_common_services:4.5.1:*:*:*:*:*:*:* Versions 4.5.1 Vulnerable ·AVEVA
  • cpe:2.3:a:aveva:platform_common_services:4.5.2:*:*:*:*:*:*:* Versions 4.5.2 Vulnerable ·AVEVA
  • cpe:2.3:a:aveva:system_platform:2020:-:*:*:*:*:*:* Versions 2020 Vulnerable ·AVEVA
  • cpe:2.3:a:aveva:system_platform:2020:r2:*:*:*:*:*:* Versions 2020 r2 Vulnerable ·AVEVA
Show 3 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:aveva:system_platform:2020:r2_p01:*:*:*:*:*:*2020 r2_p01VulnerableAVEVA
cpe:2.3:a:aveva:work_tasks:2020:-:*:*:*:*:*:*2020VulnerableAVEVA
cpe:2.3:a:aveva:work_tasks:2020:update_1:*:*:*:*:*:*2020 update_1VulnerableAVEVA
  • cpe:2.3:a:aveva:system_platform:2020:r2_p01:*:*:*:*:*:* Versions 2020 r2_p01 Vulnerable ·AVEVA
  • cpe:2.3:a:aveva:work_tasks:2020:-:*:*:*:*:*:* Versions 2020 Vulnerable ·AVEVA
  • cpe:2.3:a:aveva:work_tasks:2020:update_1:*:*:*:*:*:* Versions 2020 update_1 Vulnerable ·AVEVA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-38410
  2. 2026-10-03 Alias added: GHSA-w785-44wh-9wr3

References

Advisory 2

  • TI-2023-16745 AVEVA Operations Control Logger Execution with Unnecessary Privileges CVSS 3.1HIGH 7.8
  • TI-2023-17471 AVEVA Operations Control Logger External Control of File Name or Path CVSS 3.1HIGH 7.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences