Aveva Software, LLC vulnerabilities

8 vulnerabilities

Known vulnerabilities in Aveva Software, LLC products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 9 products.

Products

9
9.8CVE-2018-10620aveva software, llcindusoft web studio+3
EPSS score
4.20%
AVEVA InduSoft Web Studio v8.1 and v8.1SP1, and InTouch Machine Edition v2017 8.1 and v2017 8.1 SP1 a remote user could send a carefully crafted packet to exploit a stack-based buffer overflow vulnerability during tag, alarm, or event related actions such as read and write, with potential for code to be executed.9.8CVE-2018-10628aveva software, llc.intouch+2
EPSS score
5.43%
AVEVA InTouch 2014 R2 SP1 and prior, InTouch 2017, InTouch 2017 Update 1, and InTouch 2017 Update 2 allow an unauthenticated user to send a specially crafted packet that could overflow the buffer on a locale not using a dot floating point separator. Exploitation could allow remote code execution under the privileges of the InTouch View process.7.5CVE-2021-32987aveva software, llcaveva batch management 2020+6
EPSS score
0.96%
Null pointer dereference in SuiteLink server while processing command 0x0b7.5CVE-2021-32971aveva software, llcaveva batch management 2020+6
EPSS score
0.96%
Null pointer dereference in SuiteLink server while processing command 0x079.8CVE-2021-32959aveva software, llcaveva batch management 2020+6
EPSS score
0.94%
Heap-based buffer overflow in SuiteLink server while processing commands 0x05/0x067.5CVE-2021-32979aveva software, llcaveva batch management 2020+6
EPSS score
0.96%
Null pointer dereference in SuiteLink server while processing commands 0x04/0x0a7.5CVE-2021-32999aveva software, llcaveva batch management 2020+6
EPSS score
0.96%
Improper handling of exceptional conditions in SuiteLink server while processing command 0x017.5CVE-2021-32963aveva software, llcaveva batch management 2020+6
EPSS score
0.96%
Null pointer dereference in SuiteLink server while processing commands 0x03/0x10