Vulnerabilities > Industrial Software > Intouch Machine Edition 2017 > Critical

DATE CVE VULNERABILITY TITLE RISK
2018-04-18 CVE-2018-8840 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
A remote attacker could send a carefully crafted packet in InduSoft Web Studio v8.1 and prior versions, and/or InTouch Machine Edition 2017 v8.1 and prior versions during a tag, alarm, or event related action such as read and write, which may allow remote code execution.
network
low complexity
indusoft industrial-software CWE-119
critical
10.0