description: A remote attacker could send a carefully crafted packet in InduSoft Web Studio v8.1 and prior versions, and/or InTouch Machine Edition 2017 v8.1 and prior versions during a tag, alarm, or event related action such as read and write, which may allow remote code execution.
problem types: STACK-BASED BUFFER OVERFLOW CWE-121
affected:
{
product: Schneider Electric InduSoft Web Studio and InTouch Machine Edition
vendor: ICS-CERT
versions:
status: affected, version: InduSoft Web Studio v8.1 and prior versions, and InTouch Machine Edition 2017 v8.1 and prior versions.
}