CVE-2018-10620 — Stack-based Buffer Overflow in Software LLC Indusoft WEB Studio

CWE-121 — Stack-based Buffer OverflowCWE-787 — Out-of-bounds Write3 documents3 sources
Severity
9.8CRITICALNVD
EPSS
5.0%
top 10.27%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Aveva Software LLC Indusoft WEB StudioAveva Software LLC Intouch Machine EditionAveva Indusoft WEB Studio+1 more
Timeline
PublishedJul 19
Latest updateMay 13

Description

AVEVA InduSoft Web Studio v8.1 and v8.1SP1, and InTouch Machine Edition v2017 8.1 and v2017 8.1 SP1 a remote user could send a carefully crafted packet to exploit a stack-based buffer overflow vulnerability during tag, alarm, or event related actions such as read and write, with potential for code to be executed.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages4 packages

▶CVEListV5aveva_software_llc/intouch_machine_editionv2017 8.1 and v2017 8.1 SP1
▶CVEListV5aveva_software_llc/indusoft_web_studiov8.1 and v8.1SP1

🔴Vulnerability Details

2
GHSA
GHSA-92qr-7f7r-87vw: AVEVA InduSoft Web Studio v8↗2022-05-13
▶
CVEList
CVE-2018-10620: AVEVA InduSoft Web Studio v8↗2018-07-19
▶
CVE-2018-10620 — Stack-based Buffer Overflow | cvebase