Vulnerability in Indusoft Web Studio, And Intouch Edge Hmi (Formerly Machine Edition)
CVE-2018-17914
InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 SP2. This vulnerability could allow an unauthenticated user to remotely execute code with the same privileges as…
EPSS: 0.037 (88.2th percentile) — read the EPSS interpretation.
Affected products
- Unknown Indusoft Web Studio, And Intouch Edge Hmi (Formerly Machine Edition) — versions InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 SP2
Weakness classification (CWE)
References
- ics-cert.us-cert.gov/advisories/ICSA-18-305-01 (x_refsource_MISC)
- www.tenable.com/security/research/tra-2018-34 (x_refsource_MISC)