CVE-2018-10620

State: Published
Severity: Not scored
Published: Jul 19, 2018
Updated: Sep 16, 2024
Reserved: May 1, 2018

Description

AVEVA InduSoft Web Studio v8.1 and v8.1SP1, and InTouch Machine Edition v2017 8.1 and v2017 8.1 SP1 a remote user could send a carefully crafted packet to exploit a stack-based buffer overflow vulnerability during tag, alarm, or event related actions such as read and write, with potential for code to be executed.

Scores

The record has no CVSS score.

Weaknesses

CWE-121 STACK-BASED BUFFER OVERFLOW CWE-121

Affected Products

Product	Versions
InduSoft Web StudioAVEVA Software, LLC	v8.1 and v8.1SP1Affected
InTouch Machine EditionAVEVA Software, LLC	v2017 8.1 and v2017 8.1 SP1Affected

References

https://sw.aveva.com/hubfs/assets-2018/pdf/security-bulletin/SecurityBulletin_LFSec128%28002%29.pdf
https://www.tenable.com/security/research/tra-2018-19
https://ics-cert.us-cert.gov/advisories/ICSA-18-200-01
104870vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.