104870

https://ics-cert.us-cert.gov/advisories/ICSA-18-200-01

https://sw.aveva.com/hubfs/assets-2018/pdf/security-bulletin/SecurityBulletin_LFSec128(002).pdf

https://www.tenable.com/security/research/tra-2018-19

The AVEVA InduSoft Web Studio (IWS) or InTouch Machine Edition (ITME) running on the remote host is affected by a remote code execution vulnerability due to a stack overflow condition when handling command 81 in the TCPIP server listening on the default port 1234. An unauthenticated, remote attacker can exploit this issue, via a specially crafted packet, to execute arbitrary code.

CVE-2018-10620

critical

Tenable Plugins

critical