Vulnerabilities > Aveva > Intouch Machine Edition 2014 > Critical

DATE CVE VULNERABILITY TITLE RISK
2019-02-13 CVE-2019-6543 Missing Authentication for Critical Function vulnerability in Aveva Indusoft web Studio and Intouch Machine Edition 2014
AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update.
network
low complexity
aveva CWE-306
critical
9.8
2018-11-02 CVE-2018-17914 Unspecified vulnerability in Aveva products
InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 SP2.
network
low complexity
aveva
critical
9.8
2018-11-02 CVE-2018-17916 Out-of-bounds Write vulnerability in Aveva products
InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 SP2.
network
low complexity
aveva CWE-787
critical
9.8