Vulners
Lucene search
The vulnerability of Schneider Electric InTouch Machine Edition and InduSoft Web Studio HMI/SCADA systems lies in their authentication procedures, which allow attackers to execute arbitrary commands and gain full control over the server.
🗓️ 04 Dec 2017 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType 
bdu_fstec🔗 bdu.fstec.ru👁 2 Views
| Reporter | Title | Published | Views | Family All 10 |
|---|---|---|---|---|
 | Schneider Electric InduSoft Web Studio and InTouch Machine Edition Remote Code Execution Vulnerability | 22 Sep 201700:00 | – | cnvd |
 | CVE-2017-13997 | 2 Oct 201705:00 | – | cve |
 | CVE-2017-13997 | 2 Oct 201705:00 | – | cvelist |
 | EUVD-2017-5512 | 7 Oct 202500:30 | – | euvd |
 | Schneider Electric InduSoft Web Studio, InTouch Machine Edition | 21 Sep 201700:00 | – | ics |
 | CVE-2017-13997 | 3 Oct 201701:29 | – | nvd |
 | InduSoft Web Studio Authentication Bypass Vulnerability (Nov 2017) - Windows | 3 Nov 201700:00 | – | openvas |
| InTouch Machine Edition Authentication Bypass Vulnerability (Nov 2017) - Windows | 20 Nov 201700:00 | – | openvas |
 | Authentication flaw | 3 Oct 201701:29 | – | prion |
 | Schneider Electric InduSoft Web Studio < 8.0 SP2 Patch 1 Unspecified Remote Command Execution (LFSEC00000121) | 23 Oct 201700:00 | – | nessus |
10
| Source | Link |
|---|---|
| securityfocus | www.securityfocus.com/bid/100952 |
| ics-cert | www.ics-cert.us-cert.gov/advisories/ICSA-17-264-01 |
| web | www.web.nvd.nist.gov/view/vuln/detail |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
23 Mar 2021 00:00Current
8.1High risk
Vulners AI Score8.1
CVSS 39.8
CVSS 210
EPSS0.01586