CVE:CVE-2018-8840
CNNVD:CNNVD-201804-821
Schneider Electric InduSoft Web Studio和InTouch Machine Edition都是法国施耐德电气（Schneider Electric）公司的嵌入式HMI软件包。该产品为HMI客户端提供读取、写入标签和事件监控功能。
InduSoft Web Studio 8.1及之前版本和InTouch Machine Edition 2017 8.1及之前版本中存在安全漏洞。当对标签、警报或事件执行相关操作时（例如：读取和写入），远程攻击者可利用该漏洞执行代码。
solution:Upgrade indusoft web_studio to a higher version than 8.1,and avoid the version (,8.1]; Upgrade industrial-software intouch_machine_edition_2017 to a higher version than 8.1,and avoid the version (,8.1]