Back to Database
Status published
Critical
CVE-2018-10620
AVEVA InduSoft Web Studio v8.1 and v8.1SP1, and InTouch Machine...
Vulnerability Description
AVEVA InduSoft Web Studio v8.1 and v8.1SP1, and InTouch Machine Edition v2017 8.1 and v2017 8.1 SP1 a remote user could send a carefully crafted packet to exploit a stack-based buffer overflow vulnerability during tag, alarm, or event related actions such as read and write, with potential for code to be executed.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-10620
Credits & Attribution
No credits recorded in the NVD database.
References
More from AVEVA Software, LLC
View All →CVE-2021-32999
AVEVA SuiteLink Server Improper Handling of Exceptional Conditions
High
7.5
CVE-2021-32987
AVEVA SuiteLink Server Null Pointer Dereference
High
7.5
CVE-2021-32979
AVEVA SuiteLink Server Null Pointer Dereference
High
7.5
CVE-2021-32971
AVEVA SuiteLink Server Null Pointer Dereference
High
7.5
CVE-2021-32963
AVEVA SuiteLink Server Null Pointer Dereference
High
7.5
Affected Vendor
AVEVA Software, LLC
View all reports →Affected Software
InduSoft Web Studio, InTouch Machine Edition
Vulnerable Versions:
v8.1 and v8.1SP1, v2017 8.1 and v2017 8.1 SP1
Timeline
Official Publish:
July 19th, 2018
Last Modified:
September 16th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H