CWE Code: 119
Vulnerability Type: privilege_escalation
CVSS Score: 7.5
CWE Name:  Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary: aveva intouch 2014 r2 sp1 and prior, intouch 2017, intouch 2017 update 1, and intouch 2017 update 2 allow an unauthenticated user to send a specially crafted packet that could overflow the buffer on a locale not using a dot floating point separator. exploitation could allow remote code execution under the privileges of the intouch view process.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2018-07-24
Last Modified Date: 2019-10-09