CRITICAL🇵🇱 Wersja polska

CVE-2019-6543

CVSS 9.8v3.1pub. 2019-02-13upd. 2024-11-21

AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update. Code is executed under the program runtime privileges, which could lead to the compromise of the machine.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Aveva Indusoft Web Studio

    APP
    Aveva
    6.17.18.08.1

  • Aveva Intouch Machine Edition 2014

    APP
    Aveva
    r2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2018-17914CRITICAL9.8PL ✓same product

RCE bez uwierzytelnienia w Aveva InduSoft Web Studio i InTouch Edge HMI

CVE-2018-17916CRITICAL9.8PL ✓same product

Stack-based buffer overflow i RCE w Aveva InduSoft Web Studio i InTouch Edge HMI

CVE-2018-10620CRITICAL9.8PL ✓same product

Stack-based buffer overflow w AVEVA InduSoft Web Studio i InTouch Machine Edition

CVE-2019-6545HIGH7.5same product

AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machin...

CVE-2025-61937CRITICAL10.0PL ✓same vendor

RCE z uprawnieniami systemowymi w Aveva Process Optimization