Vulnerability in Invensys Wonderware Information Server
CVE-2013-0685
Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal does not restrict unspecified size and amount values, which allows remote attackers to execute arbitrary code or cause a denial of service (resource consumption) via unknown vectors.
EPSS: 0.033 (87.2th percentile) — read the EPSS interpretation.
Affected products
- Invensys Wonderware_information_server — versions 4.0, 4.5, 5.0
- N/a — versions n/a
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (US Government Resource, x_refsource_MISC)