Vulnerability Description
SQL injection vulnerability was discovered in Aanderaa GeoView Webservice prior to version 2.1.3 that could allow an unauthenticated attackers to execute arbitrary commands.
CVSS Score
9.8
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Xylem | Aanderaa Geoview | < 2.1.3 |
Related Weaknesses (CWE)
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-334-01Third Party AdvisoryUS Government Resource
- https://www.xylem.comVendor Advisory
- https://www.xylem.com/en-us/about-xylem/cybersecurity/advisories/Vendor Advisory
- https://www.xylem.com/siteassets/about-xylem/cybersecurity/advisories/xylem-aandVendor Advisory
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-334-01Third Party AdvisoryUS Government Resource
- https://www.xylem.comVendor Advisory
- https://www.xylem.com/en-us/about-xylem/cybersecurity/advisories/Vendor Advisory
- https://www.xylem.com/siteassets/about-xylem/cybersecurity/advisories/xylem-aandVendor Advisory
FAQ
What is CVE-2021-41063?
CVE-2021-41063 is a vulnerability with a CVSS score of 9.8 (CRITICAL). SQL injection vulnerability was discovered in Aanderaa GeoView Webservice prior to version 2.1.3 that could allow an unauthenticated attackers to execute arbitrary commands.
How severe is CVE-2021-41063?
CVE-2021-41063 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2021-41063?
Check the references section above for vendor advisories and patch information. Affected products include: Xylem Aanderaa Geoview.