CVE-2018-17914 - CVE House
Back to Database
Status published Critical CVE-2018-17914

InduSoft Web Studio versions prior to 8.1 SP2, and InTouch...

Vulnerability Description

InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 SP2. This vulnerability could allow an unauthenticated user to remotely execute code with the same privileges as that of the InduSoft Web Studio or InTouch Edge HMI (formerly InTouch Machine Edition) runtime.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-17914

Credits & Attribution

No credits recorded in the NVD database.

References

More from unknown

View All →
CVE-2018-3935
An exploitable code execution vulnerability exists in the UDP network...
High 7.5
CVE-2018-3934
An exploitable code execution vulnerability exists in the firmware update...
Critical 9
CVE-2018-3920
An exploitable code execution vulnerability exists in the firmware update...
High 7.6
CVE-2018-3899
An exploitable code execution vulnerability exists in the QR code...
High 8.3
CVE-2018-3898
An exploitable code execution vulnerability exists in the QR code...
High 8.3

Affected Vendor

Affected Software

InduSoft Web Studio, and InTouch Edge HMI (formerly InTouch Machine Edition)
Vulnerable Versions:
InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 SP2

Timeline

Official Publish: November 2nd, 2018
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-258

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.