Stack-based buffer overflow in AVEVA InduSoft Web Studio
Priority MEDIUM 49CWE-121Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-121 and the CVSS impact.
Summary
AVEVA InduSoft Web Studio v8.1 and v8.1SP1, and InTouch Machine Edition v2017 8.1 and v2017 8.1 SP1 a remote user could send a carefully crafted packet to exploit a stack-based buffer overflow vulnerability during tag, alarm, or event related actions such as read and write, with potential for code to be executed.
Why it matters now
EPSS 0.04198 91st percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| AVEVA | InduSoft Web Studio | v8.1 and v8.1SP1 | — | No fix listed | CNA |
| AVEVA | InTouch Machine Edition | v2017 8.1 and v2017 8.1 SP1 | — | No fix listed | CNA |
- InduSoft Web Studio VendorAVEVA Affected v8.1 and v8.1SP1 Fixed in — No fix listed CNA
- InTouch Machine Edition VendorAVEVA Affected v2017 8.1 and v2017 8.1 SP1 Fixed in — No fix listed CNA
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:aveva:indusoft_web_studio:8.1:*:*:*:*:*:*:* | 8.1 | Vulnerable | AVEVA |
| cpe:2.3:a:aveva:indusoft_web_studio:8.1:sp1:*:*:*:*:*:* | 8.1 sp1 | Vulnerable | AVEVA |
| cpe:2.3:a:aveva:intouch_machine_2017:8.1:*:*:*:*:*:*:* | 8.1 | Vulnerable | AVEVA |
| cpe:2.3:a:aveva:intouch_machine_2017:8.1:sp1:*:*:*:*:*:* | 8.1 sp1 | Vulnerable | AVEVA |
- cpe:2.3:a:aveva:indusoft_web_studio:8.1:*:*:*:*:*:*:* Versions 8.1 Vulnerable ·AVEVA
- cpe:2.3:a:aveva:indusoft_web_studio:8.1:sp1:*:*:*:*:*:* Versions 8.1 sp1 Vulnerable ·AVEVA
- cpe:2.3:a:aveva:intouch_machine_2017:8.1:*:*:*:*:*:*:* Versions 8.1 Vulnerable ·AVEVA
- cpe:2.3:a:aveva:intouch_machine_2017:8.1:sp1:*:*:*:*:*:* Versions 8.1 sp1 Vulnerable ·AVEVA
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2018-10620
- 2026-10-03 Alias added: GHSA-92qr-7f7r-87vw
References
More AVEVA Indusoft Web Studio vulnerabilities
- TI-2019-04597 Missing authentication in ICS-CERT AVEVA Software, LLC InduSoft Web Studio prior to… CVSS 3.1CRITICAL 9.8
- TI-2018-12746 InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch… CVSS 3.1CRITICAL 9.8
- TI-2019-04599 AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI… CVSS 3.1HIGH 7.5
- TI-2018-12748 Stack-based buffer overflow in InduSoft Web Studio, and InTouch Edge HMI CVSS 3.1CRITICAL 9.8
Sources
- CVE-2018-10620 · CVE Program
- CVE-2018-10620 · NVD
- FIRST EPSS
- GHSA-92qr-7f7r-87vw · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences