{"id":"CVE-2019-6543","url":"https://www.cyber-defence.io/tools/cve/CVE-2019-6543","generatedAt":"2026-10-27T22:23:48.958Z","title":"Code is executed under the program runtime privileges, which could lead to the compromise of the machine.","description":"AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update. Code is executed under the program runtime privileges, which could lead to the compromise of the machine.","published":"2019-02-13T01:29:00.000Z","lastModified":"2026-06-17T02:39:14.000Z","status":"Modified","sourceIdentifier":"ics-cert@hq.dhs.gov","cvss":{"version":"3.1","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-306"],"affected":["aveva/indusoft web studio","aveva/intouch machine edition 2014"],"epss":{"score":0.17287,"percentile":0.97085,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":false,"firstPublished":"2019-02-11","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":46342,"kind":"exploit","title":"Indusoft Web Studio 8.1 SP2 - Remote Code Execution","url":"https://www.exploit-db.com/exploits/46342","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/46342.py","file":"exploits/multiple/remote/46342.py","published":"2019-02-11","added":"2019-02-11","updated":"2019-02-12","author":"Jacob Baines","type":"remote","platform":"multiple","port":null,"verified":false,"codes":["CVE-2019-6545","CVE-2019-6543"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 17.3%, higher than 97% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-19-036-01","tags":["Third Party Advisory","US Government Resource"],"source":"ics-cert@hq.dhs.gov"},{"url":"https://www.exploit-db.com/exploits/46342/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"ics-cert@hq.dhs.gov"},{"url":"https://www.tenable.com/security/research/tra-2019-04","tags":["Third Party Advisory"],"source":"ics-cert@hq.dhs.gov"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-19-036-01","tags":["Third Party Advisory","US Government Resource"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/46342/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/research/tra-2019-04","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-6543","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}