CVE-2018-8840: Buffer Overflow
A remote attacker could send a carefully crafted packet in InduSoft Web Studio v8.1 and prior versions, and/or InTouch Machine Edition 2017 v8.1 and prior versions during a tag, alarm, or event related action such as read and write, which may allow remote code execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-8840?
CVE-2018-8840 has a severity rating that indicates it may allow for remote code execution.
How do I fix CVE-2018-8840?
To fix CVE-2018-8840, upgrade to versions later than 8.1 for InduSoft Web Studio and InTouch Machine Edition 2017.
What versions are affected by CVE-2018-8840?
CVE-2018-8840 affects InduSoft Web Studio v8.1 and prior, as well as InTouch Machine Edition 2017 v8.1 and prior.
What exploitation method is used in CVE-2018-8840?
CVE-2018-8840 can be exploited through sending a crafted packet during actions like read and write related to tags, alarms, or events.
Who should be concerned about CVE-2018-8840?
Organizations using InduSoft Web Studio or InTouch Machine Edition versions susceptible to CVE-2018-8840 should be concerned due to the potential for remote code execution.