Web Studio

web_studio

Vendor: Indusoft • 12 CVEs

CVEs (12)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-8840 2Indusoft Industrial Software 2Intouch Machine Edition 2017 Web Studio Jun 17, 2026 Apr 18, 2018 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 A remote attacker could send a carefully crafted packet in InduSoft Web Studio v8.1 and prior versions, and/or InTouch Machine Edition 2017 v8.1 and prior versions during a tag, alarm, or event related action such as rea...Show more A remote attacker could send a carefully crafted packet in InduSoft Web Studio v8.1 and prior versions, and/or InTouch Machine Edition 2017 v8.1 and prior versions during a tag, alarm, or event related action such as read and write, which may allow remote code execution.Show less
CVE-2015-7375 1Indusoft 1Web Studio May 6, 2026 Sep 25, 2015 N/A· v4 N/A· v3 7.5 HIGH· v2 Schneider Electric InduSoft Web Studio before 8.0 allows remote attackers to execute arbitrary code or cause a denial of service (unhandled runtime exception and application crash) via a crafted Indusoft Project file.
CVE-2015-7374 1Indusoft 1Web Studio May 6, 2026 Sep 25, 2015 N/A· v4 N/A· v3 7.5 HIGH· v2 The Remote Agent component in Schneider Electric InduSoft Web Studio before 8.0 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-2649.
CVE-2015-1009 2Indusoft Wonderware 2Intouch Web Studio May 6, 2026 Aug 1, 2015 N/A· v4 N/A· v3 1.7 LOW· v2 Schneider Electric InduSoft Web Studio before 7.1.3.5 Patch 5 and Wonderware InTouch Machine Edition through 7.1 SP3 Patch 4 use cleartext for project-window password storage, which allows local users to obtain sensitive...Show more Schneider Electric InduSoft Web Studio before 7.1.3.5 Patch 5 and Wonderware InTouch Machine Edition through 7.1 SP3 Patch 4 use cleartext for project-window password storage, which allows local users to obtain sensitive information by reading a file.Show less
CVE-2014-0780 1Indusoft 1Web Studio Apr 22, 2026 Apr 25, 2014 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 7.1 before SP2 Patch 4 allows remote attackers to read administrative passwords in APP files, and consequently execute arbitrary code, via unspecifi...Show more Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 7.1 before SP2 Patch 4 allows remote attackers to read administrative passwords in APP files, and consequently execute arbitrary code, via unspecified web requests.Show less
CVE-2013-1627 2Advantech Indusoft 2Advantech Studio Web Studio Apr 29, 2026 Mar 11, 2013 N/A· v4 N/A· v3 7.8 HIGH· v2 Absolute path traversal vulnerability in NTWebServer.exe in Indusoft Studio 7.0 and earlier and Advantech Studio 7.0 and earlier allows remote attackers to read arbitrary files via a full pathname in an argument to the s...Show more Absolute path traversal vulnerability in NTWebServer.exe in Indusoft Studio 7.0 and earlier and Advantech Studio 7.0 and earlier allows remote attackers to read arbitrary files via a full pathname in an argument to the sub_401A90 CreateFileW function.Show less
CVE-2011-4052 1Indusoft 1Web Studio Apr 29, 2026 Dec 5, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 Stack-based buffer overflow in CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 allows remote attackers to execute arbitrary code via a crafted 0x15 (aka Remove File) o...Show more Stack-based buffer overflow in CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 allows remote attackers to execute arbitrary code via a crafted 0x15 (aka Remove File) operation for a file with a long name.Show less
CVE-2011-4051 1Indusoft 1Web Studio Apr 29, 2026 Dec 5, 2011 N/A· v4 N/A· v3 10.0 HIGH· v2 CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 does not require authentication, which allows remote attackers to execute arbitrary code via vectors related to creatio...Show more CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 does not require authentication, which allows remote attackers to execute arbitrary code via vectors related to creation of a file, loading a DLL, and process control.Show less
CVE-2011-0342 1Indusoft 1Web Studio Apr 29, 2026 Sep 2, 2011 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple buffer overflows in the InduSoft ISSymbol ActiveX control in ISSymbol.ocx 301.1104.601.0 in InduSoft Web Studio 7.0B2 hotfix 7.0.01.04 allow remote attackers to execute arbitrary code via a long parameter to the...Show more Multiple buffer overflows in the InduSoft ISSymbol ActiveX control in ISSymbol.ocx 301.1104.601.0 in InduSoft Web Studio 7.0B2 hotfix 7.0.01.04 allow remote attackers to execute arbitrary code via a long parameter to the (1) Open, (2) Close, or (3) SetCurrentLanguage method.Show less
CVE-2011-1900 1Indusoft 1Web Studio Apr 29, 2026 May 4, 2011 N/A· v4 N/A· v3 10.0 HIGH· v2 Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 6.1 and 7.x before 7.0+Patch 1 allows remote attackers to execute arbitrary code via an invalid request.
CVE-2011-0340 2Advantech Indusoft 3Advantech Studio Thin ClientWeb Studio Apr 29, 2026 May 4, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 Multiple buffer overflows in the ISSymbol ActiveX control in ISSymbol.ocx 61.6.0.0 and 301.1009.2904.0 in the ISSymbol virtual machine, as distributed in Advantech Studio 6.1 SP6 61.6.01.05, InduSoft Web Studio before 7....Show more Multiple buffer overflows in the ISSymbol ActiveX control in ISSymbol.ocx 61.6.0.0 and 301.1009.2904.0 in the ISSymbol virtual machine, as distributed in Advantech Studio 6.1 SP6 61.6.01.05, InduSoft Web Studio before 7.0+SP1, and InduSoft Thin Client 7.0, allow remote attackers to execute arbitrary code via a long (1) InternationalOrder, (2) InternationalSeparator, or (3) LogFileName property value; or (4) a long bstrFileName argument to the OpenScreen method.Show less
CVE-2011-0488 2Advantech Indusoft 2Advantech Studio Web Studio Apr 29, 2026 Jan 18, 2011 N/A· v4 N/A· v3 10.0 HIGH· v2 Stack-based buffer overflow in NTWebServer.exe in the test web service in InduSoft NTWebServer, as distributed in Advantech Studio 6.1 and InduSoft Web Studio 7.0, allows remote attackers to cause a denial of service (da...Show more Stack-based buffer overflow in NTWebServer.exe in the test web service in InduSoft NTWebServer, as distributed in Advantech Studio 6.1 and InduSoft Web Studio 7.0, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long request to TCP port 80.Show less