AVEVA InduSoft Web Studio v8.1 and v8.1SP1, and InTouch Machine Edition v2017 8.1 and v2017 8.1 SP1 a remote user could send a carefully cr…

published 2018-07-19 8 y ago modified 2026-06-17 4 mo ago also EUVD-2018-2692

cvss: 9.8; version 3.1, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 4.2%; EPSS 4.2% chance of exploitation in 30 days, percentile 91%
public exploits: 0; none known

AVEVA InduSoft Web Studio v8.1 and v8.1SP1, and InTouch Machine Edition v2017 8.1 and v2017 8.1 SP1 a remote user could send a carefully crafted packet to exploit a stack-based buffer overflow vulnerability during tag, alarm, or event related actions such as read and write, with potential for code to be executed.

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-18-200-01 updated 2018-07-19 cvss 9.8

AVEVA InduSoft Web Studio and InTouch Machine Edition

AVEVA Software, LLC InduSoft Web Studio 8.1, 8.1 SP1 AVEVA Software, LLC InTouch Machine Edition 2017 8.1, 2017 8.1 SP1
affected: vendor fix, mitigation “Software security updates:” softwaresupportsp.schneider-electric.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

Exploit prediction

4.20% chance of exploitation in the next 30 days, higher than 91% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

tenable.com https://www.tenable.com/security/research/tra-2018-19 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
NVD	3.1	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD	2.0	7.5	AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

AVEVA Software, LLC InduSoft Web Studio
AVEVA Software, LLC InTouch Machine Edition

Classification

Weakness

CWE-121 Stack-based Buffer Overflow
CWE-787 Out-of-bounds Write

References

tenable.com /security/research/tra-2018-19
exploit, third-party-advisory
sw.aveva.com /hubfs/assets-2018/pdf/security-bulletin/SecurityBulletin_LFSec128%28002%29.pdf
ics-cert.us-cert.gov /advisories/ICSA-18-200-01
third-party-advisory, us-government-resource
securityfocus.com /bid/104870
vdb-entry, third-party-advisory

Sources

CVE List CVE-2018-10620
NVD CVE-2018-10620

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary