Vulnerabilities > Indusoft

DATE CVE VULNERABILITY TITLE RISK
2018-04-18 CVE-2018-8840 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
A remote attacker could send a carefully crafted packet in InduSoft Web Studio v8.1 and prior versions, and/or InTouch Machine Edition 2017 v8.1 and prior versions during a tag, alarm, or event related action such as read and write, which may allow remote code execution.
network
low complexity
indusoft industrial-software CWE-119
critical
9.8
2014-04-25 CVE-2014-0780 Path Traversal vulnerability in Indusoft web Studio 7.1
Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 7.1 before SP2 Patch 4 allows remote attackers to read administrative passwords in APP files, and consequently execute arbitrary code, via unspecified web requests.
network
low complexity
indusoft CWE-22
critical
9.8