schneider-electric wonderware indusoft web studio vulnerabilities and exploits

(subscribe to this query)

10

CVSSv2

A Stack-based Buffer Overflow issue exists in Schneider Electric InduSoft Web Studio v8.0 SP2 Patch 1 and prior versions, and InTouch Machine Edition v8.0 SP2 Patch 1 and prior versions. The stack-based buffer overflow vulnerability has been identified, which may allow remote cod...

Schneider-electric Wonderware Intouch Schneider-electric Wonderware Indusoft Web Studio

10

CVSSv2

A Missing Authentication for Critical Function issue exists in Schneider Electric InduSoft Web Studio v8.0 SP2 or prior, and InTouch Machine Edition v8.0 SP2 or prior. InduSoft Web Studio provides the capability for an HMI client to trigger script execution on the server for the ...

Schneider-electric Wonderware Indusoft Web Studio Schneider-electric Wonderware Intouch

7.2

CVSSv2

An Incorrect Default Permissions issue exists in Schneider Electric Wonderware InduSoft Web Studio v8.0 Patch 3 and prior versions. Upon installation, Wonderware InduSoft Web Studio creates a new directory and two files, which are placed in the system's path and can be manip...

Schneider-electric Wonderware Indusoft Web Studio

5

CVSSv2

Schneider Electric InduSoft Web Studio prior to 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 prior to 7.1.3.4 SP3 Patch 4 provide an HMI user interface that lists all valid usernames, which makes it easier for remote malicious users to obtain access via a brute-force pass...

Aveva Aveva Edge Schneider-electric Wonderware Intouch 2014

3.3

CVSSv2

Schneider Electric InduSoft Web Studio prior to 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 prior to 7.1.3.4 SP3 Patch 4 transmit cleartext credentials, which allows remote malicious users to obtain sensitive information by sniffing the network.

Aveva Aveva Edge Schneider-electric Wonderware Intouch 2014

2.1

CVSSv2

Schneider Electric InduSoft Web Studio prior to 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 prior to 7.1.3.4 SP3 Patch 4 rely on a hardcoded cleartext password to control read access to Project files and Project Configuration files, which makes it easier for local users ...

Aveva Aveva Edge Schneider-electric Wonderware Intouch 2014

2.1

CVSSv2

Schneider Electric InduSoft Web Studio prior to 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 prior to 7.1.3.4 SP3 Patch 4 store cleartext OPC User credentials in a configuration file, which allows local users to obtain sensitive information by reading this file.

Aveva Aveva Edge Schneider-electric Wonderware Intouch 2014

1.7

CVSSv2

Schneider Electric InduSoft Web Studio prior to 7.1.3.5 Patch 5 and Wonderware InTouch Machine Edition up to and including 7.1 SP3 Patch 4 use cleartext for project-window password storage, which allows local users to obtain sensitive information by reading a file.

Indusoft Web Studio Wonderware Intouch

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook