InTouch HMI Stack Buffer Overflow

The vulnerability of the InTouch HMI platform arises from an overflow in the buffer in the stack due to insufficient input data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with privileges of the InTouch View process, using a specially crafted packa...

Design/Logic Flaw

AVEVA InTouch 2014 R2 SP1 and prior, InTouch 2017, InTouch 2017 Update 1, and InTouch 2017 Update 2 allow an unauthenticated user to send a specially crafted packet that could overflow the buffer on a locale not using a dot floating point separator. Exploitation could allow remote code execution...

AVEVA InTouch Buffer Overflow Vulnerability

AVEVA InTouch is an embedded HMI software package from AVEVA Group plc in the UK. The product provides read and write tagging and event monitoring functionality for HMI clients. A security vulnerability exists in AVEVA InTouch. A remote attacker could exploit this vulnerability by sending special...

PT-2018-1368

Name of the Vulnerable Software and Affected Versions AVEVA InTouch 2014 R2 SP1 and prior AVEVA InTouch 2017 AVEVA InTouch 2017 Update 1 AVEVA InTouch 2017 Update 2 Description The issue is caused by a buffer overflow in the stack due to inadequate input processing. This allows an unauthenticated...