Indusoft

Web Studio

12 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
10

CVE-2018-8840

  • EPSS 34.19%
  • Veröffentlicht 18.04.2018 20:29:00
  • Zuletzt bearbeitet 21.11.2024 04:14:25

A remote attacker could send a carefully crafted packet in InduSoft Web Studio v8.1 and prior versions, and/or InTouch Machine Edition 2017 v8.1 and prior versions during a tag, alarm, or event related action such as read and write, which may allow r...

7.5

CVE-2015-7375

  • EPSS 1.27%
  • Veröffentlicht 25.09.2015 14:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Schneider Electric InduSoft Web Studio before 8.0 allows remote attackers to execute arbitrary code or cause a denial of service (unhandled runtime exception and application crash) via a crafted Indusoft Project file.

7.5

CVE-2015-7374

  • EPSS 1.85%
  • Veröffentlicht 25.09.2015 14:59:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The Remote Agent component in Schneider Electric InduSoft Web Studio before 8.0 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-2649.

1.7

CVE-2015-1009

  • EPSS 0.11%
  • Veröffentlicht 01.08.2015 01:59:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Schneider Electric InduSoft Web Studio before 7.1.3.5 Patch 5 and Wonderware InTouch Machine Edition through 7.1 SP3 Patch 4 use cleartext for project-window password storage, which allows local users to obtain sensitive information by reading a file...

9.8

CVE-2014-0780

Warnung Exploit
  • EPSS 89.26%
  • Veröffentlicht 25.04.2014 05:12:07
  • Zuletzt bearbeitet 22.10.2025 01:15:54

Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 7.1 before SP2 Patch 4 allows remote attackers to read administrative passwords in APP files, and consequently execute arbitrary code, via unspecified web requests.

7.8

CVE-2013-1627

  • EPSS 8.98%
  • Veröffentlicht 11.03.2013 17:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Absolute path traversal vulnerability in NTWebServer.exe in Indusoft Studio 7.0 and earlier and Advantech Studio 7.0 and earlier allows remote attackers to read arbitrary files via a full pathname in an argument to the sub_401A90 CreateFileW function...

10

CVE-2011-4051

  • EPSS 74.79%
  • Veröffentlicht 05.12.2011 11:55:06
  • Zuletzt bearbeitet 11.04.2025 00:51:21

CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 does not require authentication, which allows remote attackers to execute arbitrary code via vectors related to creation of a file, loading a DLL, an...

9.3

CVE-2011-4052

  • EPSS 6.92%
  • Veröffentlicht 05.12.2011 11:55:06
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Stack-based buffer overflow in CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 allows remote attackers to execute arbitrary code via a crafted 0x15 (aka Remove File) operation for a file with a lon...

10

CVE-2011-0342

  • EPSS 7.35%
  • Veröffentlicht 02.09.2011 16:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple buffer overflows in the InduSoft ISSymbol ActiveX control in ISSymbol.ocx 301.1104.601.0 in InduSoft Web Studio 7.0B2 hotfix 7.0.01.04 allow remote attackers to execute arbitrary code via a long parameter to the (1) Open, (2) Close, or (3) S...

10

CVE-2011-1900

  • EPSS 49.26%
  • Veröffentlicht 04.05.2011 22:55:03
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 6.1 and 7.x before 7.0+Patch 1 allows remote attackers to execute arbitrary code via an invalid request.