{"schemaVersion":3,"id":"CVE-2019-6543","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update. Code is executed under the program runtime privileges, which could lead to the compromise of the machine.","dates":{"published":"2019-02-13T01:00:00.000Z","modified":"2024-09-16T18:14:25.090Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":10,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":10,"severity":"high","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.17287,"percentile":0.97101,"severity":"medium","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.17287},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.17287,"percentile":0.97101}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.17287,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.17287,"percentile":0.97101}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"46342","name":"Indusoft Web Studio 8.1 SP2 - Remote Code Execution","source":"exploit-database","url":"https://www.exploit-db.com/exploits/46342","maturity":"poc","reliabilityScore":0.5,"verified":false,"type":"remote","platforms":["multiple"],"requiresAuth":null,"exploitdb":{"verified":false,"type":"remote","platform":"multiple","file":"exploits/multiple/remote/46342.py","codes":["CVE-2019-6545","CVE-2019-6543"]},"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-306","name":"Missing Authentication for Critical Function","description":"The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/306.html"}],"affected":[{"vendor":"aveva","product":"indusoft_web_studio","name":"indusoft web studio","label":"indusoft_web_studio","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"6.1:sp5","noFixRecorded":false,"fixedIn":null},{"text":"6.1:sp6_p3","noFixRecorded":false,"fixedIn":null},{"text":"7.1","noFixRecorded":false,"fixedIn":null},{"text":"7.1:sp1","noFixRecorded":false,"fixedIn":null},{"text":"7.1:sp2","noFixRecorded":false,"fixedIn":null},{"text":"7.1:sp3","noFixRecorded":false,"fixedIn":null},{"text":"7.1:sp3_p1","noFixRecorded":false,"fixedIn":null},{"text":"7.1:sp3_p2","noFixRecorded":false,"fixedIn":null},{"text":"7.1:sp3_p3","noFixRecorded":false,"fixedIn":null},{"text":"7.1:sp3_p4","noFixRecorded":false,"fixedIn":null},{"text":"7.1:sp3_p5","noFixRecorded":false,"fixedIn":null},{"text":"7.1:sp3_p6","noFixRecorded":false,"fixedIn":null},{"text":"7.1:sp3_p7","noFixRecorded":false,"fixedIn":null},{"text":"7.1:sp3_p8","noFixRecorded":false,"fixedIn":null},{"text":"7.1:sp3_p9","noFixRecorded":false,"fixedIn":null},{"text":"8.0","noFixRecorded":false,"fixedIn":null},{"text":"8.0:p1","noFixRecorded":false,"fixedIn":null},{"text":"8.0:p2","noFixRecorded":false,"fixedIn":null},{"text":"8.0:p3","noFixRecorded":false,"fixedIn":null},{"text":"8.0:sp1","noFixRecorded":false,"fixedIn":null},{"text":"8.0:sp1_p1","noFixRecorded":false,"fixedIn":null},{"text":"8.0:sp2","noFixRecorded":false,"fixedIn":null},{"text":"8.0:sp2_p1","noFixRecorded":false,"fixedIn":null},{"text":"8.1","noFixRecorded":false,"fixedIn":null},{"text":"8.1:p1","noFixRecorded":false,"fixedIn":null},{"text":"8.1:sp1","noFixRecorded":false,"fixedIn":null},{"text":"8.1:sp1_p1","noFixRecorded":false,"fixedIn":null},{"text":"8.1:sp2","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.1:sp5 | 6.1:sp6_p3 | 7.1 | 7.1:sp1 | 7.1:sp2 | 7.1:sp3 | 7.1:sp3_p1 | 7.1:sp3_p2 | 7.1:sp3_p3 | 7.1:sp3_p4 | 7.1:sp3_p5 | 7.1:sp3_p6 | 7.1:sp3_p7 | 7.1:sp3_p8 | 7.1:sp3_p9 | 8.0 | 8.0:p1 | 8.0:p2 | 8.0:p3 | 8.0:sp1 | 8.0:sp1_p1 | 8.0:sp2 | 8.0:sp2_p1 | 8.1 | 8.1:p1 | 8.1:sp1 | 8.1:sp1_p1 | 8.1:sp2","eol":null,"hubHref":"/vendor/aveva/indusoft_web_studio"},{"vendor":"aveva","product":"intouch_machine_edition_2014","name":"intouch machine edition 2014","label":"intouch_machine_edition_2014","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"r2","eol":null,"hubHref":"/vendor/aveva/intouch_machine_edition_2014"},{"vendor":"ics-cert","product":"aveva software, llc indusoft web studio prior to version 8.1 sp3 and intouch edge hmi (formerly intouch machine edition) prior to version 2017 update","name":"AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update","label":"aveva software, llc indusoft web studio prior to version 8.1 sp3 and intouch edge hmi (formerly intouch machine edition) prior to version 2017 update","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update","noFixRecorded":false,"fixedIn":null}],"versionsText":"AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update","eol":null,"hubHref":"/vendor/ics-cert/aveva_software_llc_indusoft_web_studio_prior_to_version_81_sp3_and_intouch_edge_hmi_formerly_intouch_machine_edition_prior_to_version_2017_update"}],"affectedCount":3,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-19-036-01","label":"ics-cert.us-cert.gov/advisories/ICSA-19-036-01","hostname":"ics-cert.us-cert.gov","tags":["X Refsource MISC","Third Party Advisory","US Government Resource"]},{"url":"https://www.exploit-db.com/exploits/46342/","label":"www.exploit-db.com/exploits/46342/","hostname":"www.exploit-db.com","tags":["Exploit","X Refsource EXPLOIT DB","Third Party Advisory","VDB Entry"]},{"url":"https://www.tenable.com/security/research/tra-2019-04","label":"www.tenable.com/security/research/tra-2019-04","hostname":"www.tenable.com","tags":["X Refsource MISC","Third Party Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2019-02-13T01:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-09-16T18:14:25.090Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":90,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T17:37:42.385Z","stale":false,"partial":false}}