CVE-2008-2005
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
7.6 High
AI Score
Confidence
Low
0.854 High
EPSS
Percentile
98.6%
The SuiteLink Service (aka slssvc.exe) in WonderWare SuiteLink before 2.0 Patch 01, as used in WonderWare InTouch 8.0, allows remote attackers to cause a denial of service (NULL pointer dereference and service shutdown) and possibly execute arbitrary code via a large length value in a Registration packet to TCP port 5413, which causes a memory allocation failure.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| wonderware:intouch | wonderware intouch | eq | 8.0 |
| wonderware:suitelink | wonderware suitelink | eq | 2.0 |
References
Related
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
7.6 High
AI Score
Confidence
Low
0.854 High
EPSS
Percentile
98.6%