WS
Product
Web Studio
On CISA KEVExploited in the wild
12
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 0Medium 0Low 0
Watch
Add Web Studio to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-0780 In wildKEV | 9.8 | Apr 25 | InduSoft Web Studio Path Traversal Affected: 7.1 |
| CVE-2018-8840 | 9.8 | Apr 18 | A remote attacker could send a carefully crafted packet in InduSoft Web Studio v8.1 and prior versions, and/or InTouch Machine Edition 2017 v8.1 and prior versions during a tag,… Affected: through 8.1 |
| CVE-2015-7375 | – | Sep 25 | Schneider Electric InduSoft Web Studio before 8.0 allows remote attackers to execute arbitrary code or cause a denial of service (unhandled runtime exception and application… Affected: through 7.1.3.6 |
| CVE-2015-7374 | – | Sep 25 | The Remote Agent component in Schneider Electric InduSoft Web Studio before 8.0 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-2649 Affected: through 7.1.3.6 |
| CVE-2015-1009 | – | Aug 1 | Schneider Electric InduSoft Web Studio before 7.1.3.5 Patch 5 and Wonderware InTouch Machine Edition through 7.1 SP3 Patch 4 use cleartext for project-window password storage,… Affected: through 7.1.3.5 |
| CVE-2013-1627 | – | Mar 11 | Absolute path traversal vulnerability in NTWebServer.exe in Indusoft Studio 7.0 and earlier and Advantech Studio 7.0 and earlier allows remote attackers to read arbitrary files… Affected: 6.1; 6.1; 7.0; 7.0b2 |
| CVE-2011-4052 | – | Dec 5 | Stack-based buffer overflow in CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 allows remote attackers to execute arbitrary… Affected: 6.1; 7.0 |
| CVE-2011-4051 | – | Dec 5 | CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 does not require authentication, which allows remote attackers to execute… Affected: 6.1; 7.0 |
| CVE-2011-0342 | – | Sep 2 | Multiple buffer overflows in the InduSoft ISSymbol ActiveX control in ISSymbol.ocx 301.1104.601.0 in InduSoft Web Studio 7.0B2 hotfix 7.0.01.04 allow remote attackers to execute… Affected: 7.0b2 |
| CVE-2011-0340 | – | May 4 | Multiple buffer overflows in the ISSymbol ActiveX control in ISSymbol.ocx 61.6.0.0 and 301.1009.2904.0 in the ISSymbol virtual machine, as distributed in Advantech Studio 6.1 SP6… Affected: through 7.0; 6.1; 6.1 |
| CVE-2011-1900 | – | May 4 | Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 6.1 and 7.x before 7.0+Patch 1 allows remote attackers to execute arbitrary code via an invalid request Affected: 6.1; 7.0 |
| CVE-2011-0488 | – | Jan 18 | Stack-based buffer overflow in NTWebServer.exe in the test web service in InduSoft NTWebServer, as distributed in Advantech Studio 6.1 and InduSoft Web Studio 7.0, allows remote… Affected: 7.0 |
Showing 12