AVEVA InduSoft Web Studio and InTouch Edge HMI

Summary

Vulnerabilities 2

• Unscored —
  CVE-2019-6543 Public exploit EPSS 17%

  AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition…

  ICS-CERT AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update Browsers
  Feb 13, 2019
• Unscored —
  CVE-2019-6545 Public exploit EPSS 14%

  AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition…

  ICS-CERT AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update Browsers
  Feb 13, 2019

Revision history

1. 2019-02-05 #1

   ICSA-19-036-01 AVEVA InduSoft Web Studio and InTouch Edge HMI

References

• ICS Advisory ICSA-19-036-01 Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-19-036-01
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B