CVEvulnerability

CVE-2012-3005

6.9 MEDIUM Published 2012-07-26 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-07-26
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C

Description

Untrusted search path vulnerability in Invensys Wonderware InTouch 2012 and earlier, as used in Wonderware Application Server, Wonderware Information Server, Foxboro Control Software, InFusion CE/FE/SCADA, InBatch, and Wonderware Historian, allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected configurations

• invensys foxboro control software 3.1 • invensys foxboro control software 4.0 • invensys infusion ce\/fe\/scada (<= 2.5) • invensys intouch (<= 2012) • invensys intouch\/wonderware application server (<= 2012) • invensys intouch\/wonderware application server 10.0 • invensys intouch\/wonderware application server 10.5 • invensys wonderware historian (<= 10.0) • invensys wonderware historian 10.0 • invensys wonderware inbatch (<= 9.5) • invensys wonderware information server (<= 4.5) • invensys wonderware information server 3.1 • invensys wonderware information server 4.0

References