Description
AVEVA InTouch 2014 R2 SP1 and prior, InTouch 2017, InTouch 2017 Update 1, and InTouch 2017 Update 2 allow an unauthenticated user to send a specially crafted packet that could overflow the buffer on a locale not using a dot floating point separator. Exploitation could allow remote code execution under the privileges of the InTouch View process.
References (3)
Core 3
Core References
Patch, Permissions Required, Third Party Advisory, US Government Resource x_refsource_misc
https://ics-cert.us-cert.gov/advisories/ICSA-18-200-02
Various Sources x_refsource_confirm
https://sw.aveva.com/hubfs/assets-2018/pdf/security-bulletin/SecurityBulletin_LFSec127%28003%29.pdf
Broken Link vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/104864
Scores
CVSS v3
9.8
EPSS
0.0543
EPSS Percentile
91.7%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-119
CWE-121
Status
published
Products (2)
aveva/intouch_2014
r2 (2 CPE variants)
aveva/intouch_2017
(3 CPE variants)
Published
Jul 24, 2018
Tracked Since
Feb 18, 2026