HIGH🇬🇧 English

CVE-2019-6545

CVSS 7.5v3.1pub. 2019-02-13upd. 2024-11-21

AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update. An unauthenticated remote user could use a specially crafted database connection configuration file to execute an arbitrary process on the server machine.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

  • Aveva Indusoft Web Studio

    APP
    Aveva
    6.17.18.08.1

  • Aveva Intouch Machine Edition 2014

    APP
    Aveva
    r2
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2019-6543CRITICAL9.8PL ✓ten sam produkt

Wykonanie kodu bez uwierzytelnienia w AVEVA InduSoft Web Studio i InTouch Edge HMI

CVE-2018-17914CRITICAL9.8PL ✓ten sam produkt

RCE bez uwierzytelnienia w Aveva InduSoft Web Studio i InTouch Edge HMI

CVE-2018-17916CRITICAL9.8PL ✓ten sam produkt

Stack-based buffer overflow i RCE w Aveva InduSoft Web Studio i InTouch Edge HMI

CVE-2018-10620CRITICAL9.8PL ✓ten sam produkt

Stack-based buffer overflow w AVEVA InduSoft Web Studio i InTouch Machine Edition

CVE-2025-61937CRITICAL10.0PL ✓ten sam vendor

RCE z uprawnieniami systemowymi w Aveva Process Optimization