Description
AVEVA InduSoft Web Studio v8.1 and v8.1SP1, and InTouch Machine Edition v2017 8.1 and v2017 8.1 SP1 a remote user could send a carefully crafted packet to exploit a stack-based buffer overflow vulnerability during tag, alarm, or event related actions such as read and write, with potential for code to be executed.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AVEVA Software | InduSoft Web Studio | v8.1 and v8.1SP1 | — |
| AVEVA Software | InTouch Machine Edition | v2017 8.1 and v2017 8.1 SP1 | — |
Advisories 1
- ICSA-18-200-01 AVEVA InduSoft Web Studio and InTouch Machine Edition CISA ICS & IT advisories · Jul 19, 2018