Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
indusoft web studio vulnerabilities and exploits
(subscribe to this query)
9.3
CVSSv2
CVE-2011-4052
Stack-based buffer overflow in CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 allows remote malicious users to execute arbitrary code via a crafted 0x15 (aka Remove File) operation for a file with a long name.
Indusoft Web Studio 6.1
Indusoft Web Studio 7.0
9.3
CVSSv2
CVE-2011-0340
Multiple buffer overflows in the ISSymbol ActiveX control in ISSymbol.ocx 61.6.0.0 and 301.1009.2904.0 in the ISSymbol virtual machine, as distributed in Advantech Studio 6.1 SP6 61.6.01.05, InduSoft Web Studio prior to 7.0+SP1, and InduSoft Thin Client 7.0, allow remote maliciou...
Indusoft Web Studio
Indusoft Web Studio 6.1
Indusoft Thin Client 7.0
Advantech Advantech Studio 6.1
1 EDB exploit
7.8
CVSSv2
CVE-2013-1627
Absolute path traversal vulnerability in NTWebServer.exe in Indusoft Studio 7.0 and previous versions and Advantech Studio 7.0 and previous versions allows remote malicious users to read arbitrary files via a full pathname in an argument to the sub_401A90 CreateFileW function.
Indusoft Web Studio 6.1
Advantech Advantech Studio 6.1
Indusoft Web Studio 7.0b2
Indusoft Web Studio 7.0
1 EDB exploit
7.5
CVSSv2
CVE-2018-10620
AVEVA InduSoft Web Studio v8.1 and v8.1SP1, and InTouch Machine Edition v2017 8.1 and v2017 8.1 SP1 a remote user could send a carefully crafted packet to exploit a stack-based buffer overflow vulnerability during tag, alarm, or event related actions such as read and write, with ...
Aveva Intouch Machine 2017 8.1
Aveva Indusoft Web Studio 8.1
7.5
CVSSv2
CVE-2015-7374
The Remote Agent component in Schneider Electric InduSoft Web Studio prior to 8.0 allows remote malicious users to execute arbitrary code via unspecified vectors, aka ZDI-CAN-2649.
Indusoft Web Studio
7.5
CVSSv2
CVE-2015-7375
Schneider Electric InduSoft Web Studio prior to 8.0 allows remote malicious users to execute arbitrary code or cause a denial of service (unhandled runtime exception and application crash) via a crafted Indusoft Project file.
Indusoft Web Studio
7.5
CVSSv2
CVE-2014-0780
Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 7.1 before SP2 Patch 4 allows remote malicious users to read administrative passwords in APP files, and consequently execute arbitrary code, via unspecified web requests.
Indusoft Web Studio
Indusoft Web Studio 7.1
1 EDB exploit
7.2
CVSSv2
CVE-2017-7968
An Incorrect Default Permissions issue exists in Schneider Electric Wonderware InduSoft Web Studio v8.0 Patch 3 and prior versions. Upon installation, Wonderware InduSoft Web Studio creates a new directory and two files, which are placed in the system's path and can be manip...
Schneider-electric Wonderware Indusoft Web Studio
5
CVSSv2
CVE-2019-6545
AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update. An unauthenticated remote user could use a specially crafted database connection configuration file to execute an arbitrary proce...
Aveva Indusoft Web Studio 8.1
Aveva Indusoft Web Studio 8.0
Aveva Indusoft Web Studio 7.1
Aveva Indusoft Web Studio 6.1
Aveva Intouch Machine Edition 2014 R2
5
CVSSv2
CVE-2015-0997
Schneider Electric InduSoft Web Studio prior to 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 prior to 7.1.3.4 SP3 Patch 4 provide an HMI user interface that lists all valid usernames, which makes it easier for remote malicious users to obtain access via a brute-force pass...
Aveva Aveva Edge
Schneider-electric Wonderware Intouch 2014
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-20065
open redirect
CVE-2024-1086
path traversal
CVE-2024-29825
XXE
CVE-2024-29822
CVE-2024-20696
CVE-2024-3564
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
NEXT »