Vulnerability Details CVE-2017-14024
A Stack-based Buffer Overflow issue was discovered in Schneider Electric InduSoft Web Studio v8.0 SP2 Patch 1 and prior versions, and InTouch Machine Edition v8.0 SP2 Patch 1 and prior versions. The stack-based buffer overflow vulnerability has been identified, which may allow remote code execution with high privileges.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.035
EPSS Ranking 87.2%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 10.0
References
Products affected by CVE-2017-14024
-
cpe:2.3:a:schneider-electric:wonderware_indusoft_web_studio:7.1
-
cpe:2.3:a:schneider-electric:wonderware_indusoft_web_studio:8.0
-
cpe:2.3:a:schneider-electric:wonderware_intouch:8.0