Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2018-2024 and is owned by Tenable, Inc. or an Affiliate thereof.SCADA_SCHNEIDER_ELECTRIC_IWS_ITME_OPCODE_50_STACK_OVERFLOW.NBIN
HistoryApr 23, 2018 - 12:00 a.m.

Schneider Electric InduSoft Web Studio / InTouch Machine Edition Opcode 50 mbstowcs() Stack Overflow

2018-04-2300:00:00
This script is Copyright (C) 2018-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
12
JSON

The Schneider Electric InduSoft Web Studio (IWS) or InTouch Machine Edition (ITME) running on the remote host is affected by a remote code execution vulnerability due to a stack overflow condition when handling Opcode 50 in the TCPIP server listening on the default port 1234. An unauthenticated, remote attacker can exploit this issue, via a specially crafted packet, to execute arbitrary code.

Binary data scada_schneider_electric_iws_itme_opcode_50_stack_overflow.nbin
VendorProductVersionCPE
schneider_electricwonderware_intouch_machine_editionx-cpe:/a:schneider_electric:wonderware_intouch_machine_edition
schneider_electricindusoft_web_studiocpe:/a:schneider_electric:indusoft_web_studio
JSON