High severity7.5NVD Advisory· Published Feb 13, 2019· Updated Jun 17, 2026

CVE-2019-6545

Description

AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update. An unauthenticated remote user could use a specially crafted database connection configuration file to execute an arbitrary process on the server machine.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Aveva/InTouch Edge HMIllm-create
Range: < 2017 Update
Aveva/InTouch Machine Editionllm-create
Range: < 2017 Update
Aveva/InduSoft Web Studiollm-create
Range: < 8.1 SP3
ICS-CERT/AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Updatev5
Range: AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update

Patches

Vulnerability mechanics

References

www.exploit-db.com/exploits/46342/nvdExploitThird Party AdvisoryVDB Entry
ics-cert.us-cert.gov/advisories/ICSA-19-036-01nvdMitigationThird Party AdvisoryUS Government Resource
www.tenable.com/security/research/tra-2019-04nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.011
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000