CVE-2021-33008

CVE-2021-33008 is a critical authentication bypass vulnerability affecting AVEVA System Platform versions 2017 through 2020 R2 P01, where the software fails to require user authentication for critical functionalities. This flaw carries a CVSS score of 9.8 (Critical) due to its network-based attack vector, low attack complexity, and high potential for complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, nor publicly available exploit code in Metasploit or ExploitDB, the vulnerability has garnered significant community discussion, indicating awareness and potential interest from threat actors.