PT-2019-18155 · Aveva · Indusoft Web Studio+1

Published 2019-02-13 · Updated 2022-11-30 · CVE-2019-6543

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AVEVA Software, LLC InduSoft Web Studio versions prior to 8.1 SP3 AVEVA Software, LLC InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 Update

Description The issue allows code to be executed under the program runtime privileges, potentially leading to the compromise of the machine.

Recommendations For AVEVA Software, LLC InduSoft Web Studio versions prior to 8.1 SP3, update to version 8.1 SP3 or later. For AVEVA Software, LLC InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 Update, update to version 2017 Update or later.

Exploit

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2019-6543

Affected Products

Intouch Edge Hmi

Indusoft Web Studio

References · 5

• 🔥 https://exploit-db.com/exploits/46342 · Exploit
• https://osv.dev/vulnerability/CVE-2019-6543 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-6543 · Security Note
• https://tenable.com/security/research/tra-2019-04 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-19-036-01 · Note