CVEs-PoC/2021/CVE-2021-32942.md

CVE-2021-32942

Description

The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all prior versions (WindowViewer) if an authorized, privileged user creates a diagnostic memory dump of the process and saves it to a non-protected location.

POC

Reference

• https://www.aveva.com/en/support/cyber-security-updates/

Github

• https://github.com/Live-Hack-CVE/CVE-2021-32942