PT-2019-18157 · Aveva · Indusoft Web Studio+1

CVE-2019-6545 · Publicado 2019-02-13 · Atualizado 2023-01-31

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions AVEVA Software, LLC InduSoft Web Studio versions prior to 8.1 SP3 AVEVA Software, LLC InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 Update

Description An issue exists where an unauthenticated remote user could execute an arbitrary process on the server machine by using a specially crafted database connection configuration file.

Recommendations For AVEVA Software, LLC InduSoft Web Studio versions prior to 8.1 SP3, update to version 8.1 SP3 or later. For AVEVA Software, LLC InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 Update, update to version 2017 Update or later.

Exploit

Correção

Enumeração de Fraquezas

CWE-99

Identificadores relacionados

CVE-2019-6545

Produtos afetados

Intouch Edge Hmi

Indusoft Web Studio

Referências · 5

• 🔥 https://exploit-db.com/exploits/46342 · Exploit
• https://osv.dev/vulnerability/CVE-2019-6545 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-6545 · Nota de Segurança
• https://tenable.com/security/research/tra-2019-04 · Nota
• https://ics-cert.us-cert.gov/advisories/ICSA-19-036-01 · Nota