GCVE - cpe:2.3:a:indusoft:web_studio:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:indusoft:web_studio:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Indusoft (`b3a72c80-dd94-5014-8aaf-823f079a5a7c`)
Product	Web Studio (`46539d26-3279-5678-a984-046407c81746`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-8840`	vulnerable	2026-06-08 05:12:06.545228	Details available A remote attacker could send a carefully crafted packet in InduSoft Web Studio v8.1 and prior versions, and/or InTouch Machine Edition 2017 v8.1 and prior versions during a tag, alarm, or event related action such as read and write, which may allow remote code execution. Published: 2018-04-18T20:00:00.000Z Updated: 2024-09-16T17:53:19.851Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/103949 http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000125/ https://www.tenable.com/security/research/tra-2018-07 https://ics-cert.us-cert.gov/advisories/ICSA-18-107-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-7375`	vulnerable	2026-06-08 05:07:00.526302	Details available Schneider Electric InduSoft Web Studio before 8.0 allows remote attackers to execute arbitrary code or cause a denial of service (unhandled runtime exception and application crash) via a crafted Indusoft Project file. Published: 2015-09-25T14:00:00.000Z Updated: 2024-08-06T07:51:27.197Z Open on db.gcve.eu Reference links http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-251-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-7374`	vulnerable	2026-06-08 05:07:00.525932	Details available The Remote Agent component in Schneider Electric InduSoft Web Studio before 8.0 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-2649. Published: 2015-09-25T14:00:00.000Z Updated: 2024-08-06T07:51:27.163Z Open on db.gcve.eu Reference links http://www.zerodayinitiative.com/advisories/ZDI-15-451 http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-251-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-1009`	vulnerable	2026-06-08 05:06:24.812574	Details available Schneider Electric InduSoft Web Studio before 7.1.3.5 Patch 5 and Wonderware InTouch Machine Edition through 7.1 SP3 Patch 4 use cleartext for project-window password storage, which allows local users to obtain sensitive information by reading a file. Published: 2015-08-01T01:00:00.000Z Updated: 2024-08-06T04:26:11.501Z Open on db.gcve.eu Reference links https://ics-cert.us-cert.gov/advisories/ICSA-15-211-01 https://gcsresource.invensys.com/support/docs/_securitybulletins/Security_bulletin_LFSEC00000110.pdf http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-100-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-0780`	vulnerable	2026-06-08 05:05:14.289331	InduSoft Web Studio Path Traversal Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 7.1 before SP2 Patch 4 allows remote attackers to read administrative passwords in APP files, and consequently execute arbitrary code, via unspecified web requests. Published: 2014-04-25T01:00:00.000Z Updated: 2025-10-22T00:05:38.084Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/42699/ https://www.cisa.gov/news-events/ics-advisories/icsa-14-107-02 http://www.securityfocus.com/bid/67056 http://download.indusoft.com/71.2.4/IWS71.2.4.zip	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-0340`	vulnerable	2026-06-08 04:56:36.600520	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.