Design/Logic Flaw

2012-04-0220:55:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.5%

JSON

Invensys Wonderware Information Server 4.0 SP1 and 4.5 does not properly implement client controls, which allows remote attackers to bypass intended access restrictions via unspecified vectors.

CPENameOperatorVersion
wonderware_information_servereq4.0 sp1
wonderware_information_servereq4.5

CPE	Name	Operator	Version
	wonderware_information_server	eq	4.0 sp1
	wonderware_information_server	eq	4.5

References

osvdb.org/80890

secunia.com/advisories/48603

www.securityfocus.com/bid/52851

www.securitytracker.com/id?1026886

www.securitytracker.com/id?1026887

www.us-cert.gov/control_systems/pdf/ICSA-12-062-01.pdf