CVE-2018-17914

Published: Nov 2, 2018Modified: Nov 21, 2024

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 SP2. This vulnerability could allow an unauthenticated user to remotely execute code with the same privileges as that of the InduSoft Web Studio or InTouch Edge HMI (formerly InTouch Machine Edition) runtime.

Affected (30)

Products: Aveva: Indusoft Web Studio, Edge, Intouch Machine Edition 2014

Aveva

3 products

Indusoft Web Studio

Edge

Intouch Machine Edition 2014

Configuration A

27 vulnerable

Vulnerable Software	Affected Versions
Aveva Indusoft Web Studio	Version 6.1 sp5
Aveva Indusoft Web Studio	Version 6.1 sp6_p3
Aveva Indusoft Web Studio	Version 7.1
Aveva Indusoft Web Studio	Version 7.1 sp1
Aveva Indusoft Web Studio	Version 7.1 sp2
Aveva Indusoft Web Studio	Version 7.1 sp3
Aveva Indusoft Web Studio	Version 7.1 sp3_p1
Aveva Indusoft Web Studio	Version 7.1 sp3_p2
Aveva Indusoft Web Studio	Version 7.1 sp3_p3
Aveva Indusoft Web Studio	Version 7.1 sp3_p4
Aveva Indusoft Web Studio	Version 7.1 sp3_p5
Aveva Indusoft Web Studio	Version 7.1 sp3_p6
Aveva Indusoft Web Studio	Version 7.1 sp3_p7
Aveva Indusoft Web Studio	Version 7.1 sp3_p8
Aveva Indusoft Web Studio	Version 7.1 sp3_p9
Aveva Indusoft Web Studio	Version 8.0
Aveva Indusoft Web Studio	Version 8.0 p1
Aveva Indusoft Web Studio	Version 8.0 p2
Aveva Indusoft Web Studio	Version 8.0 p3
Aveva Indusoft Web Studio	Version 8.0 sp1
Aveva Indusoft Web Studio	Version 8.0 sp1_p1
Aveva Indusoft Web Studio	Version 8.0 sp2
Aveva Indusoft Web Studio	Version 8.0 sp2_p1
Aveva Indusoft Web Studio	Version 8.1
Aveva Indusoft Web Studio	Version 8.1 p1
Aveva Indusoft Web Studio	Version 8.1 sp1
Aveva Indusoft Web Studio	Version 8.1 sp1_p1