Schneider Electric InduSoft Web Studio, InTouch Machine Edition
ATTENTION: Remotely exploitable/low skill level to exploit.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-13997US | critical9.8OT elevated | — | ||
A Missing Authentication for Critical Function issue was discovered in Schneider Electric InduSoft Web Studio v8.0 SP2 or prior, and InTouch Machine Edition v8.0 SP2 or prior. Indu… | ||||
references
External citations — patches, advisories, analysis.
remediations (4)
- MitigationInTouch Machine Edition
Schneider Electric recommends users using InduSoft Web Studio v8.0 SP2 or prior should upgrade and apply InduSoft Web Studio v8.0 SP2 Patch 1 as soon as possible.
http://download.indusoft.com/80.2.1/IWS80.2.1.zip - MitigationInduSoft Web Studio
Schneider Electric recommends users using InduSoft Web Studio v8.0 SP2 or prior should upgrade and apply InduSoft Web Studio v8.0 SP2 Patch 1 as soon as possible.
http://download.indusoft.com/80.2.1/IWS80.2.1.zip - FixedInTouch Machine Edition
Schneider Electric recommends users using InTouch Machine Edition v8.0 SP2 or prior should upgrade and apply InTouch Machine Edition v8.0 SP2 Patch 1 as soon as possible.
https://gcsresource.invensys.com/tracking/ConfirmDownload.aspx?id=22453 - FixedInduSoft Web Studio
Schneider Electric recommends users using InTouch Machine Edition v8.0 SP2 or prior should upgrade and apply InTouch Machine Edition v8.0 SP2 Patch 1 as soon as possible.
https://gcsresource.invensys.com/tracking/ConfirmDownload.aspx?id=22453
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan