| Package | Affected versions | Patched versions |
|---|---|---|
| indusoft web studio | = 6.1= 7.1= 8.0= 8.1 | |
| intouch machine edition 2014 | = r2 |
AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update. An unauthenticated remote user could use a specially crafted database connection configuration file to execute an arbitrary process on the server machine.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free