CVE-2012-3005
Untrusted search path vulnerability in Invensys Wonderware InTouch 2012 and earlier, as used in Wonderware Application Server, Wonderware Information Server, Foxboro Control Software, InFusion CE/FE/SCADA, InBatch, and Wonderware Historian, allows local…
Does this matter?
Lower severity and a low EPSS score (0.45%). Track it; it rarely justifies an emergency change on its own.
Description
Untrusted search path vulnerability in Invensys Wonderware InTouch 2012 and earlier, as used in Wonderware Application Server, Wonderware Information Server, Foxboro Control Software, InFusion CE/FE/SCADA, InBatch, and Wonderware Historian, allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.
- CVSS 2.0
- 6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 0.45% probability · 38th percentile
- CISA KEV
- Not listed
- Affected
- invensys/foxboro control software · invensys/infusion ce\/fe\/scada · invensys/intouch · invensys/intouch\/wonderware application server · invensys/wonderware historian · invensys/wonderware inbatch · invensys/wonderware information server
- Source
- ics-cert@hq.dhs.gov
References
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-177-02.pdfUS Government Resource
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-177-02.pdfUS Government Resource
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.