CVE-2018-10628

CRITICAL

AVEVA InTouch 2014 R2 SP1 and prior, InTouch 2017, InTouch 2017 Update 1, and InTouch 2017 Update 2 allow an unauthenticated user to send a specially crafted packet that could overflow the buffer o...

Affects 2 products across 1 vendor.

BCS8.21
CVSS 3.09.8
EPSS5.4%
Percentile92th
PatchPatched
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-119: Improper Restriction of Operations within Memory Buffer

Parent class for buffer-related vulnerabilities where operations exceed buffer boundaries.

CWE-121: Stack-Based Buffer Overflow

Buffer overflow corrupting the program stack, typically overwriting the return address for code execution.

Related Attack Patterns (CAPEC)
CAPEC-8 Buffer Overflow in an API Call
via CWE-119
CAPEC-9 Buffer Overflow in Local Command-Line Utilities
via CWE-119
CAPEC-10 Buffer Overflow via Environment Variables
via CWE-119
CAPEC-14 Client-side Injection-induced Buffer Overflow
via CWE-119
CAPEC-24 Filter Failure through Buffer Overflow
via CWE-119
Show all 12

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ SAGE Intelligence — CITED Relevance Research Team

CVE-2018-10628 affects AVEVA InTouch versions up to 2017 Update 2, allowing an unauthenticated user to execute remote code by sending a specially crafted packet. This vulnerability has a high CVSS score of 9.8, indicating critical impact on confidentiality, integrity, and availability.

BSID: BS-2018-GLOBAL-123505-C • Model: Qwen/Qwen2.5-72B-Instruct-AWQ • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2018-10628?
CVE-2018-10628 affects AVEVA InTouch versions up to 2017 Update 2, allowing an unauthenticated user to execute remote code by sending a specially crafted packet. This vulnerability has a high CVSS score of 9.8, indicating critical impact on confidentiality, integrity, and availability.
What is the CVSS score for CVE-2018-10628?
CVE-2018-10628 has CVSS 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS: 5.4%.
Is CVE-2018-10628 actively exploited?
No confirmed active exploitation of CVE-2018-10628 as of 2026-05-30.
How do I remediate CVE-2018-10628?
Priority: HIGH. Advisory: https://ics-cert.us-cert.gov/advisories/ICSA-18-200-02
What systems are affected by CVE-2018-10628?
CVE-2018-10628 affects: Aveva, Aveva.
What NERC-CIP standard applies to CVE-2018-10628?
NERC CIP CIP-007 CIP-007-R2: This CVE violates CIP-007-R2 because it allows unauthorized access to the control system, which could compromise the security of the electronic security perimeter.
What IEC 62443 requirement maps to CVE-2018-10628?
IEC 62443 SR 7.6: This CVE maps to SR 7.6 because it involves a buffer overflow vulnerability that can be exploited to execute arbitrary code, which is a common security risk in industrial control systems.
Vulnerability Details
CVE IDCVE-2018-10628
BSIDBS-2018-GLOBAL-123505-C BreachSpider Global ID
CVSS VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published2018-07-24
Last Modified2024-11-21
ICS Relevance70%
Weakness (CWE)
Verticals
ICS-OT
SourceNVD
Official Description

AVEVA InTouch 2014 R2 SP1 and prior, InTouch 2017, InTouch 2017 Update 1, and InTouch 2017 Update 2 allow an unauthenticated user to send a specially crafted packet that could overflow the buffer on a locale not using a dot floating point separator. Exploitation could allow remote code execution under the privileges of the InTouch View process.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

The vulnerability can be exploited by an unauthenticated attacker over the network. The attacker sends a specially crafted packet that triggers a buffer overflow in the InTouch View process, potentially leading to remote code execution with the privileges of the process. The attack does not require user interaction and can be performed remotely.

Exploitation Likelihood: MEDIUM

Affected Products
VendorProductFixed Version
Aveva Intouch 2014
Aveva Intouch 2017
Remediation
View Vendor Advisory →

Remediation Priority: HIGH

Threat Intelligence
● Threat Intelligence Validated: July 2026 | Threat Age: 2923 Days
CISA KEVNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
● Virtual Patch — CITED Relevance SAGE Engine MEDIUM CONFIDENCE

Implement network segmentation to isolate the InTouch application from untrusted networks. Use firewalls to restrict access to the InTouch application to only trusted sources.

No reliable network detection signature exists for this vulnerability class — apply the compensating controls above and the vendor patch. SAGE only publishes a network rule when a concrete on-the-wire signature can be grounded in the advisory.

NERC CIP: CIP-007 CIP-007-R2
This CVE violates CIP-007-R2 because it allows unauthorized access to the control system, which could compromise the security of the electronic security perimeter.
IEC 62443: SR 7.6
This CVE maps to SR 7.6 because it involves a buffer overflow vulnerability that can be exploited to execute arbitrary code, which is a common security risk in industrial control systems.

Virtual patch generated by CITED Relevance SAGE. Validate in isolated environment before production deployment. Compensating control only - does not replace vendor patch.

SAGE Enrichment Record — provenance & audit hash
ModelQwen/Qwen2.5-72B-Instruct-AWQ
ConfidenceHIGH
Enriched At2026-05-24
SHA-512 Audit Hashafb4d88a7e101124588138dde1d3ce9fec4541f6fe5f2120d8c9f941c40a5c1d9c945be4d32bcab6217b8f36f991f511577c3b4cb70cc9acbffcb367948d0d22
Related CVEs affecting Aveva
CVE-2011-3143 10.0 Use-after-free vulnerability in Control Microsystems ClearSCADA 2005, 2007, a... CVE-2025-61937 10.0 The vulnerability, if exploited, could allow an unauthenticated miscreant to... CVE-2022-1467 9.9 Windows OS can be configured to overlay a “language bar” on top of any applic... CVE-2017-5158 9.8 An Information Exposure issue was discovered in Schneider Electric Wonderware... CVE-2018-10620 9.8 AVEVA InduSoft Web Studio v8.1 and v8.1SP1, and InTouch Machine Edition v2017...
View all Aveva CVEs →

Critical Severity - Know Your Exposure

A CVSS 9.8 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Check Your Assets Free →