Vulnerability in Invensys Foxboro Control Software
CVE-2012-3005
Untrusted search path vulnerability in Invensys Wonderware InTouch 2012 and earlier, as used in Wonderware Application Server, Wonderware Information Server, Foxboro Control Software, InFusion CE/FE/SCADA, InBatch, and Wonderware Historian, allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.
EPSS: 0.004 (36.6th percentile) — read the EPSS interpretation.
Affected products
- Invensys Foxboro_control_software — versions 3.1, 4.0
- Invensys Infusion_ce\/fe\/scada
- Invensys Intouch
- Invensys Intouch\/wonderware_application_server — versions 10.0, 10.5
- Invensys Wonderware_historian — versions 10.0
- Invensys Wonderware_inbatch
- Invensys Wonderware_information_server — versions 3.1, 4.0
- N/a — versions n/a
References
- ics-cert@hq.dhs.gov (US Government Resource, x_refsource_MISC)