CVE-2017-14024

2017-11-1320:00:00

icscert

www.cve.org

10 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.6%

JSON

A Stack-based Buffer Overflow issue was discovered in Schneider Electric InduSoft Web Studio v8.0 SP2 Patch 1 and prior versions, and InTouch Machine Edition v8.0 SP2 Patch 1 and prior versions. The stack-based buffer overflow vulnerability has been identified, which may allow remote code execution with high privileges.

CNA Affected

[
  {
    "product": "Schneider Electric InduSoft Web Studio and InTouch Machine Edition",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Schneider Electric InduSoft Web Studio and InTouch Machine Edition"
      }
    ]
  }
]