AVEVA InduSoft Web Studio / InTouch Edge HMI UniSoft.dll wcscpy() Stack Overflow
Critical Nessus Plugin ID 118576
Synopsis
The AVEVA InduSoft Web Studio or InTouch Edge HMI (formerly InTouch Machine Edition) is affected by a remote code execution vulnerability.
Description
The AVEVA InduSoft Web Studio (IWS) or InTouch Edge HMI (formerly InTouch Machine Edition) running on the remote host is affected by a remote code execution vulnerability due to a stack overflow condition when handling certain command messages to the TCPIP server listening on the default port 1234. An unauthenticated, remote attacker can exploit this issue, via a specially crafted message, to execute arbitrary code.
Solution
Apply InduSoft Web Studio v8.1 SP2 or later / InTouch Edge HMI (formerly InTouch Machine Edition) 2017 SP2 or later.