CVE-2017-14024

Critical

Published: 13/11/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A Stack-based Buffer Overflow issue was discovered in Schneider Electric InduSoft Web Studio v8.0 SP2 Patch 1 and prior versions, and InTouch Machine Edition v8.0 SP2 Patch 1 and prior versions. This vulnerability may allow remote code execution with high privileges.

Risk Assessment

This vulnerability poses a serious risk to organizations as it may lead to remote execution of malicious code, potentially resulting in data loss or system takeover.

Recommendation

It is recommended to update to the latest version of the software to mitigate this vulnerability and to monitor systems for potential exploitation attempts.

Original NVD description (English source)

A Stack-based Buffer Overflow issue was discovered in Schneider Electric InduSoft Web Studio v8.0 SP2 Patch 1 and prior versions, and InTouch Machine Edition v8.0 SP2 Patch 1 and prior versions. The stack-based buffer overflow vulnerability has been identified, which may allow remote code execution with high privileges.