Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2018-04-18	CVE-2018-8840	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products A remote attacker could send a carefully crafted packet in InduSoft Web Studio v8.1 and prior versions, and/or InTouch Machine Edition 2017 v8.1 and prior versions during a tag, alarm, or event related action such as read and write, which may allow remote code execution. network low complexity indusoft industrial-software CWE-119 critical	10.0