CVE-2012-3005

2012-07-2610:00:00

icscert

www.cve.org

vulnerability

wonderware intouch

privileges

trojan horse dll

untrusted search path

AI Score

6.5

Confidence

High

EPSS

Percentile

0.4%

JSON

Untrusted search path vulnerability in Invensys Wonderware InTouch 2012 and earlier, as used in Wonderware Application Server, Wonderware Information Server, Foxboro Control Software, InFusion CE/FE/SCADA, InBatch, and Wonderware Historian, allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.

References

www.us-cert.gov/control_systems/pdf/ICSA-12-177-02.pdf