Schneider Electric InduSoft Web Studio, InTouch Machine Edition
ATTENTION: Remotely exploitable/low skill level to exploit.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2017-13997US | critical9.8OT erhöht | — | ||
A Missing Authentication for Critical Function issue was discovered in Schneider Electric InduSoft Web Studio v8.0 SP2 or prior, and InTouch Machine Edition v8.0 SP2 or prior. Indu… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (4)
- MitigationInTouch Machine Edition
Schneider Electric recommends users using InduSoft Web Studio v8.0 SP2 or prior should upgrade and apply InduSoft Web Studio v8.0 SP2 Patch 1 as soon as possible.
http://download.indusoft.com/80.2.1/IWS80.2.1.zip - MitigationInduSoft Web Studio
Schneider Electric recommends users using InduSoft Web Studio v8.0 SP2 or prior should upgrade and apply InduSoft Web Studio v8.0 SP2 Patch 1 as soon as possible.
http://download.indusoft.com/80.2.1/IWS80.2.1.zip - BehobenInTouch Machine Edition
Schneider Electric recommends users using InTouch Machine Edition v8.0 SP2 or prior should upgrade and apply InTouch Machine Edition v8.0 SP2 Patch 1 as soon as possible.
https://gcsresource.invensys.com/tracking/ConfirmDownload.aspx?id=22453 - BehobenInduSoft Web Studio
Schneider Electric recommends users using InTouch Machine Edition v8.0 SP2 or prior should upgrade and apply InTouch Machine Edition v8.0 SP2 Patch 1 as soon as possible.
https://gcsresource.invensys.com/tracking/ConfirmDownload.aspx?id=22453
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan