CVE-2018-8840 | BDVDB-2026-99699 Detail
ICS-CERTSchneider Electric InduSoft Web Studio and InTouch Machine Edition
Description#
A remote attacker could send a carefully crafted packet in InduSoft Web Studio v8.1 and prior versions, and/or InTouch Machine Edition 2017 v8.1 and prior versions during a tag, alarm, or event related action such as read and write, which may allow remote code execution.
Impact#
No impact statement in the source data.
Weaknesses#
- CWE-121 STACK-BASED BUFFER OVERFLOW CWE-121
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.