CVE-2018-10620 AVEVA InduSoft Web Studio v8.1 and v8.1SP1, and InTouch Machine Edition v2017 8.1 and v2017 8.1 SP1 a remote user could send a carefully crafted packet to exploit a stack-based buffer overflow vulnera...
CriticalCVSS 9.8
EPSS 4.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
AVEVA InduSoft Web Studio v8.1 and v8.1SP1, and InTouch Machine Edition v2017 8.1 and v2017 8.1 SP1 a remote user could send a carefully crafted packet to exploit a stack-based buffer overflow vulnerability during tag, alarm, or event related actions such as read and write, with potential for code to be executed.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| AVEVA indusoft web studio | = 8.1 | No fix listed |
| AVEVA indusoft web studio | = 8.1-sp1 | No fix listed |
| AVEVA intouch machine 2017 | = 8.1 | No fix listed |
| AVEVA intouch machine 2017 | = 8.1-sp1 | No fix listed |
| AVEVA Software, LLC InduSoft Web Studio | = v8.1 and v8.1SP1 | No fix listed |
| AVEVA Software, LLC InTouch Machine Edition | = v2017 8.1 and v2017 8.1 SP1 | No fix listed |
References
- 104870 third-party-advisory vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource
- sw.aveva.com
- www.tenable.com exploit third-party-advisory