← Vulnerability feed

Vulnerability record · CVE-2021-32942 · published 9 June 2021

CVE-2021-32942: Aveva intouch 2017 cleartext storage of sensitive data vulnerability

Aveva · Intouch 2017

The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all prior versions (WindowViewer) if an authorized, privileged user creates a diagnostic memory dump of the process and saves it to a non-protected location.

5.5 CVSS 3.1 Medium EPSS 0.18% · top 93.1% CWE-316 · CWE-316CWE-312 · Cleartext storage of sensitive data
5.5CVSS 3.1 base score, v2 2.1
0.18%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all prior versions (WindowViewer) if an authorized, privileged user creates a diagnostic memory dump of the process and saves it to a non-protected location.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://us-cert.cisa.gov/ics/advisories/icsa-21-159-03 PatchThird Party AdvisoryUS Government Resource
https://www.aveva.com/en/support/cyber-security-updates/ PatchVendor Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-159-03 PatchThird Party AdvisoryUS Government Resource
https://www.aveva.com/en/support/cyber-security-updates/ PatchVendor Advisory

Track CVE-2021-32942 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2018-10628Aveva intouch 2014 stack-based buffer overflow vulnerabilityAVEVA InTouch 2014 R2 SP1 and prior, InTouch 2017, InTouch 2017 Update 1, and InTouch 2017 Update 2 allow an unauthenticated user to send a specially…EPSS 5.4%

Source: NIST National Vulnerability Database (record CVE-2021-32942), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.