Description
A remote attacker could send a carefully crafted packet in InduSoft Web Studio v8.1 and prior versions, and/or InTouch Machine Edition 2017 v8.1 and prior versions during a tag, alarm, or event related action such as read and write, which may allow remote code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ICS-CERT | Schneider Electric InduSoft Web Studio and InTouch Machine Edition | InduSoft Web Studio v8.1 and prior versions, and InTouch Machine Edition 2017 v8.1 and prior versions. | — |
Advisories 1
- ICSA-18-107-01 Schneider Electric InduSoft Web Studio and InTouch Machine Edition CISA ICS & IT advisories · Apr 17, 2018