Vulnerabilities > CVE-2018-10620 - Out-of-bounds Write vulnerability in Aveva Indusoft web Studio and Intouch Machine 2017

047910
CVSS 9.8 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
aveva
CWE-787
critical

Summary

AVEVA InduSoft Web Studio v8.1 and v8.1SP1, and InTouch Machine Edition v2017 8.1 and v2017 8.1 SP1 a remote user could send a carefully crafted packet to exploit a stack-based buffer overflow vulnerability during tag, alarm, or event related actions such as read and write, with potential for code to be executed.

Vulnerable Configurations

Part Description Count
Application
Aveva
4

Common Weakness Enumeration (CWE)