AVEVA InduSoft Web Studio and InTouch Edge HMI (formerly InTouch Machine Edition)
Successful exploitation of these vulnerabilities could allow an unauthenticated user to remotely execute code.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-17916US | critical9.8 | — | ||
InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 SP2. A remote attacker could send a carefully crafted… | ||||
| CVE-2018-17914US | critical9.8 | — | ||
InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 SP2. This vulnerability could allow an unauthenticated… | ||||
references
External citations — patches, advisories, analysis.
remediations (8)
- MitigationInTouch Edge HMI (formerly InTouch Machine Edition)
AVEVA recommends that users update existing projects to enable the security features of InduSoft Web Studio and InTouch Edge HMI
- MitigationInTouch Edge HMI (formerly InTouch Machine Edition)
AVEVA recommends that users update existing projects to enable the security features of InduSoft Web Studio and InTouch Edge HMI
- MitigationInduSoft Web Studio
AVEVA recommends that users update existing projects to enable the security features of InduSoft Web Studio and InTouch Edge HMI
- MitigationInduSoft Web Studio
AVEVA recommends that users update existing projects to enable the security features of InduSoft Web Studio and InTouch Edge HMI
- FixedInTouch Edge HMI (formerly InTouch Machine Edition)
AVEVA recommends that users upgrade to InduSoft Web Studio v8.1 SP2 and InTouch Edge HMI (formerly InTouch Machine Edition) 2017 SP2 as soon as possible. Software updates can be downloaded from the Global Customer Support “Software Download” area
- FixedInTouch Edge HMI (formerly InTouch Machine Edition)
AVEVA recommends that users upgrade to InduSoft Web Studio v8.1 SP2 and InTouch Edge HMI (formerly InTouch Machine Edition) 2017 SP2 as soon as possible. Software updates can be downloaded from the Global Customer Support “Software Download” area
- FixedInduSoft Web Studio
AVEVA recommends that users upgrade to InduSoft Web Studio v8.1 SP2 and InTouch Edge HMI (formerly InTouch Machine Edition) 2017 SP2 as soon as possible. Software updates can be downloaded from the Global Customer Support “Software Download” area
- FixedInduSoft Web Studio
AVEVA recommends that users upgrade to InduSoft Web Studio v8.1 SP2 and InTouch Edge HMI (formerly InTouch Machine Edition) 2017 SP2 as soon as possible. Software updates can be downloaded from the Global Customer Support “Software Download” area
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan