medium6.9
CVE-2012-3005
Untrusted search path vulnerability in Invensys Wonderware InTouch 2012 and earlier, as used in Wonderware Application Server, Wonderware Information Server, F…
Impact
Untrusted search path vulnerability in Invensys Wonderware InTouch 2012 and earlier, as used in Wonderware Application Server, Wonderware Information Server, Foxboro Control Software, InFusion CE/FE/SCADA, InBatch, and Wonderware Historian, allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Invensys | Foxboro Control Software | Versions 3.1, 4.0 |
| Invensys | Infusion Ce\/Fe\/Scada | through 2.5 |
| Invensys | Intouch | through 2012 |
| Invensys | Intouch\/Wonderware Application Server | through 2012 Versions 10.0, 10.5 |
| Invensys | Wonderware Historian | through 10.0 Version 10.0 |
| Invensys | Wonderware Inbatch | through 9.5 |
| Invensys | Wonderware Information Server | through 4.5 Versions 3.1, 4.0 |