PT-2018-14266 · Indusoft+1 · Indusoft Web Studio+1

Publicado 2018-11-02 · Atualizado 2021-04-08 · CVE-2018-17914

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions InduSoft Web Studio versions prior to 8.1 SP2 InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 SP2

Description This issue could allow an unauthenticated user to remotely execute code with the same privileges as that of the InduSoft Web Studio or InTouch Edge HMI runtime.

Recommendations For InduSoft Web Studio versions prior to 8.1 SP2, update to version 8.1 SP2 or later. For InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 SP2, update to version 2017 SP2 or later.

Exploit

Correção

Enumeração de Fraquezas

CWE-258

Identificadores relacionados

CVE-2018-17914

Produtos afetados

Intouch Edge Hmi

Indusoft Web Studio

Referências · 5

• 🔥 https://tenable.com/security/research/tra-2018-34 · Exploit
• https://t.me/cvenotify/12939 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2018-17914 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-17914 · Aviso do Fabricante
• https://ics-cert.us-cert.gov/advisories/ICSA-18-305-01 · Nota