CVE-2017-14024

A Stack-based Buffer Overflow issue was discovered in Schneider Electric InduSoft Web Studio v8.0 SP2 Patch 1 and prior versions, and InTouch Machine Edition v8.0 SP2 Patch 1 and prior versions. The stack-based buffer overflow vulnerability has been identified, which may allow remote code execution with high privileges.

Score

CVSS 3.0 9.8 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2017-11-13

Last modified

2024-08-05

Weaknesses

CWE-119, CWE-121

Affected products

• Wonderware Indusoft Web Studio (Schneider-electric)
• Wonderware Intouch (Schneider-electric)

References

• http://www.securityfocus.com/bid/101779
• https://ics-cert.us-cert.gov/advisories/ICSA-17-313-02