CVE-2018-10620CWE-121

CVE-2018-10620: fallo en AVEVA Software, LLC InduSoft Web Studio

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear InduSoft Web Studio+ Monitorear InTouch Machine

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

3Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackepss 4.2%
AVEVA InduSoft Web Studio v8.1 and v8.1SP1, and InTouch Machine Edition v2017 8.1 and v2017 8.1 SP1 a remote user could send a carefully crafted packet to exploit a stack-based buffer overflow vulnerability during tag, alarm, or event related actions such as read and write, with potential for code to be executed.
Productos afectados
AVEVA Software, LLC · InduSoft Web StudioAVEVA Software, LLC · InTouch Machine Edition