Wonderware Information Server Multiple Vulnerabilities

Overview ICS-CERT originally released Advisory “ICSA-12-062-01PInvensys Wonderware Information Server Multiple Vulnerabilities” on the US-CERT secure portal on March 02, 2012. This web page release was delayed to allow users time to download and install the update. Independent security researche...

CVE-2012-0225

Invensys Wonderware Information Server 4.0 SP1 and 4.5 (Portal and Client) contain a Cross-Site Scripting (CVE-2012-0225) vulnerability. ICS-CERT/ICS advisories indicate that, if exploited, these flaws could lead to denial of service, information disclosure, remote code execution, or session cred...