CVE-2015-7374: Input Validation
Published Sep 25, 2015
·Updated
The Remote Agent component in Schneider Electric InduSoft Web Studio before 8.0 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-2649.
Affected Software
1 affected component
InduSoft Web Studio<=7.1.3.6
Event History
Sep 25, 2015
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-7374?
CVE-2015-7374 has a high severity rating due to its potential for arbitrary code execution.
2
How do I fix CVE-2015-7374?
To fix CVE-2015-7374, upgrade to InduSoft Web Studio version 8.0 or higher.
3
What components are affected by CVE-2015-7374?
CVE-2015-7374 affects the Remote Agent component in InduSoft Web Studio prior to version 8.0.
4
Can CVE-2015-7374 be exploited remotely?
Yes, CVE-2015-7374 can be exploited by remote attackers to execute arbitrary code.
5
What versions of InduSoft Web Studio are vulnerable to CVE-2015-7374?
InduSoft Web Studio versions up to and including 7.1.3.6 are vulnerable to CVE-2015-7374.