CVE-2012-4693

CVE-2012-4693 affects Invensys Wonderware InTouch 2012 R2 and earlier and Siemens ProcessSuite, which store passwords in Ps_security.ini using a weak, reversible encryption. The vulnerability allows a local attacker with read access to Ps_security.ini to decrypt usernames and passwords and potent...

PT-2012-5556

Name of the Vulnerable Software and Affected Versions Invensys Wonderware InTouch versions 2012 R2 and earlier Description The issue concerns the use of a weak encryption algorithm for data stored in the Ps security.ini file. This weakness makes it easier for local users to discover passwords by...

CVE-2012-4693: Undefined Security Weakness

Invensys Wonderware InTouch 2012 R2 and earlier and Siemens ProcessSuite use a weak encryption algorithm for data in Pssecurity.ini, which makes it easier for local users to discover passwords by reading this file...

CVE-2012-3005

Untrusted search path vulnerability in Invensys Wonderware InTouch 2012 and earlier, as used in Wonderware Application Server, Wonderware Information Server, Foxboro Control Software, InFusion CE/FE/SCADA, InBatch, and Wonderware Historian, allows local users to gain privileges via a Trojan horse...

Design/Logic Flaw

Untrusted search path vulnerability in Invensys Wonderware InTouch 2012 and earlier, as used in Wonderware Application Server, Wonderware Information Server, Foxboro Control Software, InFusion CE/FE/SCADA, InBatch, and Wonderware Historian, allows local users to gain privileges via a Trojan horse...

CVE-2012-3005

Untrusted search path vulnerability in Invensys Wonderware InTouch 2012 and earlier, as used in Wonderware Application Server, Wonderware Information Server, Foxboro Control Software, InFusion CE/FE/SCADA, InBatch, and Wonderware Historian, allows local users to gain privileges via a Trojan horse...

CVE-2012-3005

CVE-2012-3005 is an Untrusted Search Path (DLL hijack) vulnerability in Invensys Wonderware InTouch 2012 and earlier, used by Wonderware InTouch family products (Application Server, Information Server, Foxboro Control Software, InFusion CE/FE/SCADA, InBatch, Wonderware Historian). The underlying ...

CVE-2012-3005: Undefined Security Weakness

Untrusted search path vulnerability in Invensys Wonderware InTouch 2012 and earlier, as used in Wonderware Application Server, Wonderware Information Server, Foxboro Control Software, InFusion CE/FE/SCADA, InBatch, and Wonderware Historian, allows local users to gain privileges via a Trojan horse...

PT-2012-4429

Name of the Vulnerable Software and Affected Versions Invensys Wonderware InTouch versions 2012 and earlier Description The issue allows local users to gain privileges via a Trojan horse DLL in an unspecified directory. This is due to an untrusted search path vulnerability. Recommendations For...

CVE-2008-2005

The SuiteLink Service aka slssvc.exe in WonderWare SuiteLink before 2.0 Patch 01, as used in WonderWare InTouch 8.0, allows remote attackers to cause a denial of service NULL pointer dereference and service shutdown and possibly execute arbitrary code via a large length value in a Registration...

CVE-2008-2005: Undefined Security Weakness

The SuiteLink Service aka slssvc.exe in WonderWare SuiteLink before 2.0 Patch 01, as used in WonderWare InTouch 8.0, allows remote attackers to cause a denial of service NULL pointer dereference and service shutdown and possibly execute arbitrary code via a large length value in a Registration...

Wonderware SuiteLink Denial of Service vulnerability

Advisory ID Internal CORE-2008-0129 1. Advisory Information Title: Wonderware SuiteLink Denial of Service vulnerability Advisory ID: CORE-2008-0129 Advisory URL:https://www.coresecurity.com/content/wonderware Date published: 2008-05-05 Date of last update: 2008-05-05 Vendors contacted: Wonderware...

Code injection

Invensys Wonderware InTouch 8.0 creates a NetDDE share with insecure permissions Everyone/Full Control, which allows remote authenticated attackers, and possibly anonymous users, to execute arbitrary programs...

CVE-2007-6033: Incorrect Permission Assignment for Critical Resource

Invensys Wonderware InTouch 8.0 creates a NetDDE share with insecure permissions Everyone/Full Control, which allows remote authenticated attackers, and possibly anonymous users, to execute arbitrary programs...

Invensys Wonderware InTouch creates insecure NetDDE share

Overview Invensys Wonderware InTouch 8.0 creates a NetDDE share that could allow an attacker to run arbitrary programs. Description Invensys Wonderware InTouch HMI Software is used in Supervisory Control And Data Acquisition SCADA systems.Dynamic Data Exchange DDE was designed to allow Microsoft...