Vulnerabilities > Aveva > Indusoft WEB Studio
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-02-13 | CVE-2019-6545 | Unspecified vulnerability in Aveva Indusoft web Studio and Intouch Machine Edition 2014 AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update. | 7.5 |
| 2019-02-13 | CVE-2019-6543 | Missing Authentication for Critical Function vulnerability in Aveva Indusoft web Studio and Intouch Machine Edition 2014 AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update. | 9.8 |
| 2018-11-02 | CVE-2018-17916 | Out-of-bounds Write vulnerability in Aveva products InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 SP2. | 10.0 |
| 2018-11-02 | CVE-2018-17914 | Unspecified vulnerability in Aveva products InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 SP2. | 10.0 |
| 2018-07-19 | CVE-2018-10620 | Out-of-bounds Write vulnerability in Aveva Indusoft web Studio and Intouch Machine 2017 AVEVA InduSoft Web Studio v8.1 and v8.1SP1, and InTouch Machine Edition v2017 8.1 and v2017 8.1 SP1 a remote user could send a carefully crafted packet to exploit a stack-based buffer overflow vulnerability during tag, alarm, or event related actions such as read and write, with potential for code to be executed. | 9.8 |