Critical ICSA-17-313-02 1 CVE

Schneider Electric InduSoft Web Studio and InTouch Machine Edition

Published Nov 9, 2017 · Updated Nov 9, 2017

Vendor: Schneider Electric Product: InduSoft Web Studio Product: InTouch Machine Edition

Summary

ATTENTION: Remotely exploitable/low skill level to exploit. Public exploits are available.

Vulnerabilities 1

Unscored —

CVE-2017-14024

A Stack-based Buffer Overflow issue was discovered in Schneider Electric InduSoft Web Studio v8.0 SP2 Patch 1 and prior…

Nov 13, 2017

Revision history

2017-11-09 #1
ICSA-17-313-02 Schneider Electric InduSoft Web Studio, InTouch Machine Edition

References

ICS Advisory ICSA-17-313-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-17-313-02
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-17-313-02