What is CVE-2018-17914?

CVE-2018-17914 is a critical-severity vulnerability in Aveva Edge, classified under CWE-258. CVSS score: 9.8/10. Published 2018-11-02.

How severe is CVE-2018-17914?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in Aveva Edge

CVE-2018-17914

InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 SP2. This vulnerability could allow an unauthenticated user to remotely execute code with the same privileges as…

EPSS: 0.046 (90.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Aveva Edge — versions 8.1
Aveva Indusoft_web_studio — versions 6.1, 7.1, 8.0
Aveva Intouch_machine_edition_2014 — versions r2
Unknown Indusoft Web Studio, And Intouch Edge Hmi (Formerly Machine Edition) — versions InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 SP2

Weakness classification (CWE)

CWE-258

References

ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC, Mitigation)
ics-cert@hq.dhs.gov (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2018-17914?: CVE-2018-17914 is a critical-severity vulnerability in Aveva Edge, classified under CWE-258. CVSS score: 9.8/10. Published 2018-11-02.
How severe is CVE-2018-17914?: Critical severity. CVSS v3 base score is 9.8 out of 10.