Design/Logic Flaw

AVEVA InTouch 2014 R2 SP1 and prior, InTouch 2017, InTouch 2017 Update 1, and InTouch 2017 Update 2 allow an unauthenticated user to send a specially crafted packet that could overflow the buffer on a locale not using a dot floating point separator. Exploitation could allow remote code execution...

PT-2018-1368

Name of the Vulnerable Software and Affected Versions AVEVA InTouch 2014 R2 SP1 and prior AVEVA InTouch 2017 AVEVA InTouch 2017 Update 1 AVEVA InTouch 2017 Update 2 Description The issue is caused by a buffer overflow in the stack due to inadequate input processing. This allows an unauthenticated...