Aveva Intouch Machine Edition 2014 vulnerabilities

4 CVEs affecting Aveva Intouch Machine Edition 2014, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-6545, published 2019-02-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-6543, published 2019-02-13. Critical severity, CVSS 9.8. EPSS: 17.3% chance of exploitation in the next 30 days. AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update. Code is executed under the program runtime…
CVE-2019-6545, published 2019-02-13. High severity, CVSS 7.5. EPSS: 13.9% chance of exploitation in the next 30 days. AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update. An unauthenticated remote user could use a…
CVE-2018-17914, published 2018-11-02. Critical severity, CVSS 9.8. EPSS: 4.6% chance of exploitation in the next 30 days. InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 SP2. This vulnerability could allow an unauthenticated user to remotely…
CVE-2018-17916, published 2018-11-02. Critical severity, CVSS 9.8. EPSS: 3.7% chance of exploitation in the next 30 days. InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 SP2. A remote attacker could send a carefully crafted packet to exploit a…