Lucene search
This script is Copyright (C) 2019-2024 and is owned by Tenable, Inc. or an Affiliate thereof.SCADA_AVEVA_IWS_ITEH_CMD_66_RCE.NBINHistoryFeb 14, 2019 - 12:00 a.m.
AVEVA InduSoft Web Studio / InTouch Edge HMI Command 66 RCE
2019-02-1400:00:00
This script is Copyright (C) 2019-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
40
The AVEVA InduSoft Web Studio (IWS) or InTouch Edge HMI (formerly InTouch Machine Edition) running on the remote host is affected by a remote code execution vulnerability due to multiple flaws in the TCPIP server listening on the default ports 1234 and 51234. Specifically, the server does not require authentication for command 66 received from a remote client and it can be instructed to read a database connection configuration file from an external host. An unauthenticated, remote attacker can exploit this issue, via a specially crafted message, to execute arbitrary code under the privileges of the IWS or InTouch Edge HMI runtime.
Binary data scada_aveva_iws_iteh_cmd_66_rce.nbin| Vendor | Product | Version | CPE |
|---|---|---|---|
| aveva | intouch_edge_hmi | x-cpe:/a:aveva:intouch_edge_hmi | |
| schneider_electric | wonderware_intouch_machine_edition | x-cpe:/a:schneider_electric:wonderware_intouch_machine_edition | |
| schneider_electric | indusoft_web_studio | cpe:/a:schneider_electric:indusoft_web_studio |