AVEVA InduSoft Web Studio and InTouch Edge HMI
view advisory published 2019-03-19
Successful exploitation of this vulnerability could allow execution of unauthorized code or commands.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-6534US | high7.8 | — | ||
The uncontrolled search path element vulnerability in Gemalto Sentinel UltraPro Client Library ux32w.dll Versions 1.3.0, 1.3.1, and 1.3.2 enables an attacker to load and execute a… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (4)
- MitigationInTouch Edge HMI
InduSoft Web Studio: v8.1 SP3
http://download.indusoft.com/81.3.0/IWS81.3.0.zip - MitigationInduSoft Web Studio
InduSoft Web Studio: v8.1 SP3
http://download.indusoft.com/81.3.0/IWS81.3.0.zip - FixedInTouch Edge HMI
Users who are unable to upgrade to the latest version of InduSoft Web Studio or InTouch Edge HMI, can alternatively apply Security Update LFSec131:
http://www.indusoft.com/download/patches/security/LFSec131.zip - FixedInduSoft Web Studio
Users who are unable to upgrade to the latest version of InduSoft Web Studio or InTouch Edge HMI, can alternatively apply Security Update LFSec131:
http://www.indusoft.com/download/patches/security/LFSec131.zip
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan