Vulnerabilities

TI-2019-04599 CVE-2019-6545 · GHSA-pqwc-c6p6-66pq

AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI…

MEDIUM 48

AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.13858 Published 2019-02-13 No fix listed CWE-99

TI-2019-04597 CVE-2019-6543 · GHSA-pr9x-32vv-5c37

Missing authentication in ICS-CERT AVEVA Software, LLC InduSoft Web Studio prior to…

MEDIUM 59

AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.17287 Published 2019-02-13 No fix listed CWE-306

TI-2018-12748 CVE-2018-17916 · GHSA-2fr8-jp4p-fff3

Stack-based buffer overflow in InduSoft Web Studio, and InTouch Edge HMI

MEDIUM 48

InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 SP2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03733 Published 2018-11-02 No fix listed CWE-121

TI-2018-12746 CVE-2018-17914 · GHSA-xjh8-jwcf-pmgc

InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch…

MEDIUM 49

InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 SP2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04567 Published 2018-11-02 No fix listed CWE-258

TI-2018-07509 CVE-2018-10620 · GHSA-92qr-7f7r-87vw

Stack-based buffer overflow in AVEVA InduSoft Web Studio