Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
aveva aveva edge vulnerabilities and exploits
(subscribe to this query)
3.3
CVSSv2
CVE-2015-0998
Schneider Electric InduSoft Web Studio prior to 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 prior to 7.1.3.4 SP3 Patch 4 transmit cleartext credentials, which allows remote malicious users to obtain sensitive information by sniffing the network.
Aveva Aveva Edge
Schneider-electric Wonderware Intouch 2014
2.1
CVSSv2
CVE-2015-0996
Schneider Electric InduSoft Web Studio prior to 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 prior to 7.1.3.4 SP3 Patch 4 rely on a hardcoded cleartext password to control read access to Project files and Project Configuration files, which makes it easier for local users ...
Aveva Aveva Edge
Schneider-electric Wonderware Intouch 2014
2.1
CVSSv2
CVE-2015-0999
Schneider Electric InduSoft Web Studio prior to 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 prior to 7.1.3.4 SP3 Patch 4 store cleartext OPC User credentials in a configuration file, which allows local users to obtain sensitive information by reading this file.
Aveva Aveva Edge
Schneider-electric Wonderware Intouch 2014
NA
CVE-2023-33873
This privilege escalation vulnerability, if exploited, cloud allow a local OS-authenticated user with standard privileges to escalate to System privilege on the machine where these products are installed, resulting in complete compromise of the target machine.
Aveva System Platform 2020
Aveva Manufacturing Execution System 2020
Aveva Mobile Operator 2020
Aveva Work Tasks 2020
Aveva Telemetry Server 2020r2
Aveva System Platform
Aveva Historian 2020
Aveva Historian
Aveva Intouch 2020
Aveva Intouch
Aveva Enterprise Licensing
Aveva Recipe Management
Aveva Recipe Management 2020
Aveva Manufacturing Execution System
Aveva Batch Management 2020
Aveva Batch Management
Aveva Communication Drivers
Aveva Communication Drivers 2020
Aveva Mobile Operator
Aveva Plant Scada
Aveva Plant Scada 2020
Aveva Work Tasks
NA
CVE-2023-34982
This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where these products are installed, resulting in denial of service.
Aveva System Platform 2020
Aveva Manufacturing Execution System 2020
Aveva Mobile Operator 2020
Aveva Work Tasks 2020
Aveva Telemetry Server 2020r2
Aveva System Platform
Aveva Historian 2020
Aveva Historian
Aveva Intouch 2020
Aveva Intouch
Aveva Enterprise Licensing
Aveva Recipe Management
Aveva Recipe Management 2020
Aveva Manufacturing Execution System
Aveva Batch Management 2020
Aveva Batch Management
Aveva Communication Drivers
Aveva Communication Drivers 2020
Aveva Mobile Operator
Aveva Plant Scada
Aveva Plant Scada 2020
Aveva Work Tasks
10
CVSSv2
CVE-2018-17916
InduSoft Web Studio versions before 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions before 2017 SP2. A remote attacker could send a carefully crafted packet to exploit a stack-based buffer overflow vulnerability during tag, alarm, or event related action...
Aveva Indusoft Web Studio 8.0
Aveva Indusoft Web Studio 7.1
Aveva Indusoft Web Studio 8.1
Aveva Indusoft Web Studio 6.1
Aveva Edge 8.1
Aveva Intouch Machine Edition 2014 R2
10
CVSSv2
CVE-2018-17914
InduSoft Web Studio versions before 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions before 2017 SP2. This vulnerability could allow an unauthenticated user to remotely execute code with the same privileges as that of the InduSoft Web Studio or InTouch Ed...
Aveva Indusoft Web Studio 8.0
Aveva Indusoft Web Studio 7.1
Aveva Indusoft Web Studio 8.1
Aveva Indusoft Web Studio 6.1
Aveva Edge 8.1
Aveva Intouch Machine Edition 2014 R2
10
CVSSv2
CVE-2019-6543
AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update. Code is executed under the program runtime privileges, which could lead to the compromise of the machine.
Aveva Indusoft Web Studio 8.1
Aveva Indusoft Web Studio 8.0
Aveva Indusoft Web Studio 7.1
Aveva Indusoft Web Studio 6.1
Aveva Intouch Machine Edition 2014 R2
5
CVSSv2
CVE-2019-6545
AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update. An unauthenticated remote user could use a specially crafted database connection configuration file to execute an arbitrary proce...
Aveva Indusoft Web Studio 8.1
Aveva Indusoft Web Studio 8.0
Aveva Indusoft Web Studio 7.1
Aveva Indusoft Web Studio 6.1
Aveva Intouch Machine Edition 2014 R2
NA
CVE-2023-6132
The vulnerability, if exploited, could allow a malicious entity with access to the file system to achieve arbitrary code execution and privilege escalation by tricking AVEVA Edge to load an unsafe DLL.
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
NULL pointer dereference
CVE-2023-52689
CVE-2024-23803
client side
CVE-2023-52696
information disclosure
CVE-2024-35843
CVE-2024-27130
CVE-2023-52697
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
NEXT »