Intouch
18 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Intouch, a product in the ics ot iot space. Use it to gauge the current risk picture and drill into individual advisories.
Intouch CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 18 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical1
- High9
- Medium7
- Low1
Latest CVEs
The 15 most recently published vulnerabilities affecting Intouch.
- CVE-2024-7113Allocation of Resources Without Limits or Throttling in AVEVA SuiteLink Server7.5
- CVE-2023-34982AVEVA Operations Control Logger External Control of File Name or Path 5.5
- CVE-2023-33873AVEVA Operations Control Logger Execution with Unnecessary Privileges 7.8
- CVE-2021-32987AVEVA SuiteLink Server Null Pointer Dereference7.5
- CVE-2021-32999AVEVA SuiteLink Server Improper Handling of Exceptional Conditions7.5
- CVE-2021-32979AVEVA SuiteLink Server Null Pointer Dereference7.5
- CVE-2021-32971AVEVA SuiteLink Server Null Pointer Dereference7.5
- CVE-2021-32959AVEVA SuiteLink Server Buffer Overflow8.1
- CVE-2021-32942The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all prior versions (WindowViewer) if an authorized, privileged user creates a diagnostic memory dump of t...6.6
- CVE-2018-10628AVEVA InTouch 2014 R2 SP1 and prior, InTouch 2017, InTouch 2017 Update 1, and InTouch 2017 Update 2 allow an unauthenticated user to send a specially crafted packet that could overflow the buffer o...9.8
- CVE-2015-1009Schneider Electric InduSoft Web Studio before 7.1.3.5 Patch 5 and Wonderware InTouch Machine Edition through 7.1 SP3 Patch 4 use cleartext for project-window password storage, which allows local us...1.7
- CVE-2012-3005Untrusted search path vulnerability in Invensys Wonderware InTouch 2012 and earlier, as used in Wonderware Application Server, Wonderware Information Server, Foxboro Control Software, InFusion CE/F...6.9
- CVE-2012-3847slssvc.exe in Invensys Wonderware SuiteLink in Invensys InTouch 2012 and Wonderware Application Server 2012 allows remote attackers to cause a denial of service (resource consumption) via a long Un...5.0
- CVE-2012-0258Heap-based buffer overflow in the WWCabFile ActiveX component in the Wonderware System Platform in Invensys Wonderware Application Server 2012 and earlier, Foxboro Control Software 3.1 and earlier,...6.8
- CVE-2012-0257Heap-based buffer overflow in the WWCabFile ActiveX component in the Wonderware System Platform in Invensys Wonderware Application Server 2012 and earlier, Foxboro Control Software 3.1 and earlier,...6.8
Product grouping is registry-driven, with AI assist and human review. How it works