CVE-2019-6543

AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update. Code is executed under the program runtime privileges, which could lead to the compromise of the machine.

• CWE-306
• CWE-306

• https://ics-cert.us-cert.gov/advisories/ICSA-19-036-01Third Party Advisory, US Government Resource
• https://www.exploit-db.com/exploits/46342/Exploit, Third Party Advisory, VDB Entry
• https://www.tenable.com/security/research/tra-2019-04Third Party Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-19-036-01Third Party Advisory, US Government Resource
• https://www.exploit-db.com/exploits/46342/Exploit, Third Party Advisory, VDB Entry
• https://www.tenable.com/security/research/tra-2019-04Third Party Advisory

Published

Feb 13, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-6537Multiple stack-based buffer overflow vulnerabilities in WECO…7.8
• CVE-2019-6538The Conexus telemetry protocol utilized within Medtronic MyC…6.5
• CVE-2019-6539Several heap-based buffer overflow vulnerabilities in WECON …7.8
• CVE-2019-6540The Conexus telemetry protocol utilized within Medtronic MyC…6.5
• CVE-2019-6541A memory corruption vulnerability has been identified in WEC…7.8
• CVE-2019-6542ENTTEC Datagate MK2, Storm 24, Pixelator all firmware versio…7.5
• CVE-2019-6544GE Communicator, all versions prior to 4.0.517, has a servic…5.6
• CVE-2019-6545AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1…7.5
• CVE-2019-6546GE Communicator, all versions prior to 4.0.517, allows an at…7.8
• CVE-2019-6547Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Ve…5.5
• CVE-2019-6548GE Communicator, all versions prior to 4.0.517, contains two…9.8
• CVE-2019-6549An attacker could retrieve plain-text credentials stored in …7.2