Summary
Successful exploitation of this vulnerability during tag, alarm, or event related actions could allow remote code execution that, under high privileges, could completely compromise the device.
Vulnerabilities 1
-
Unscored —
A remote attacker could send a carefully crafted packet in InduSoft Web Studio v8.1 and prior versions, and/or InTouch …
Revision history
-
#1
ICSA-18-107-01 Schneider Electric InduSoft Web Studio and InTouch Machine Edition
References
-
ICS Advisory ICSA-18-107-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-18-107-01
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-18-107-01
-
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf