CVE-2019-6545

7.5 highEPSS 14%

High (7.5) in aveva. EPSS 14% chance of exploitation in the next 30 days.

AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update. An unauthenticated remote user could use a specially crafted database connection configuration file to execute an arbitrary process on the server machine.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 14% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
CWE: CWE-99
Published: 2019-02-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

aveva:indusoft_web_studio
aveva:intouch_machine_edition_2014

References

https://ics-cert.us-cert.gov/advisories/ICSA-19-036-01
https://www.exploit-db.com/exploits/46342/
https://www.tenable.com/security/research/tra-2019-04
https://ics-cert.us-cert.gov/advisories/ICSA-19-036-01
https://www.exploit-db.com/exploits/46342/

Check your stack JSON