← Back

Intouch 2017

intouch_2017

Vendor: Aveva • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-32942
1Aveva
2Intouch 2017
Intouch 2020
Jun 17, 2026
Jun 9, 2021
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all prior versions (WindowViewer) if an authorized, privileged user creates a diagnostic memory dump of the process and saves it...Show more
The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all prior versions (WindowViewer) if an authorized, privileged user creates a diagnostic memory dump of the process and saves it to a non-protected location.Show less
CVE-2018-10628
1Aveva
2Intouch 2014
Intouch 2017
Nov 21, 2024
Jul 24, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
AVEVA InTouch 2014 R2 SP1 and prior, InTouch 2017, InTouch 2017 Update 1, and InTouch 2017 Update 2 allow an unauthenticated user to send a specially crafted packet that could overflow the buffer on a locale not using a...Show more
AVEVA InTouch 2014 R2 SP1 and prior, InTouch 2017, InTouch 2017 Update 1, and InTouch 2017 Update 2 allow an unauthenticated user to send a specially crafted packet that could overflow the buffer on a locale not using a dot floating point separator. Exploitation could allow remote code execution under the privileges of the InTouch View process.Show less