AVEVA InduSoft Web Studio / InTouch Edge HMI UniSoft.dll wcscpy() Stack Overflow
Critical Nessus Plugin ID 118576
Synopsis
The AVEVA InduSoft Web Studio or InTouch Edge HMI (formerly InTouch
Machine Edition) is affected by a remote code execution
vulnerability.
Description
The AVEVA InduSoft Web Studio (IWS) or InTouch Edge HMI (formerly
InTouch Machine Edition) running on the remote host is affected by a
remote code execution vulnerability due to a stack overflow condition
when handling certain command messages to the TCPIP server listening
on the default port 1234. An unauthenticated, remote attacker can
exploit this issue, via a specially crafted message, to execute
arbitrary code.
Solution
Apply InduSoft Web Studio v8.1 SP2 or later / InTouch Edge HMI
(formerly InTouch Machine Edition) 2017 SP2 or later.