The vulnerability of the InTouch HMI platform, caused by an overflow in the stack buffer, allows a malicious actor to execute arbitrary code.

The vulnerability of the InTouch HMI platform arises from an overflow in the buffer in the stack due to insufficient input data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with privileges of the InTouch View process, using a specially crafted packa...

Design/Logic Flaw

AVEVA InTouch 2014 R2 SP1 and prior, InTouch 2017, InTouch 2017 Update 1, and InTouch 2017 Update 2 allow an unauthenticated user to send a specially crafted packet that could overflow the buffer on a locale not using a dot floating point separator. Exploitation could allow remote code execution...

AVEVA InTouch Buffer Overflow Vulnerability

AVEVA InTouch is an embedded HMI software package from AVEVA Group plc in the UK. The product provides read and write tagging and event monitoring functionality for HMI clients. A security vulnerability exists in AVEVA InTouch. A remote attacker could exploit this vulnerability by sending special...