Siemens ProcessSuite and Invensys Intouch Poorly Encrypted Password File

Overview This advisory provides mitigation details for a vulnerability that impacts Siemens ProcessSuite and Invensys Wonderware InTouch products. Researcher Seth Bromberger of NCI Security, LLC and independent researcher Slade Griffin have identified an insecure password storage vulnerability in...

Design/Logic Flaw

Untrusted search path vulnerability in Invensys Wonderware InTouch 2012 and earlier, as used in Wonderware Application Server, Wonderware Information Server, Foxboro Control Software, InFusion CE/FE/SCADA, InBatch, and Wonderware Historian, allows local users to gain privileges via a Trojan horse...

CVE-2012-3005

CVE-2012-3005 is an Untrusted Search Path (DLL hijack) vulnerability in Invensys Wonderware InTouch 2012 and earlier, used by Wonderware InTouch family products (Application Server, Information Server, Foxboro Control Software, InFusion CE/FE/SCADA, InBatch, Wonderware Historian). The underlying ...

CVE-2012-3007

Stack-based buffer overflow in slssvc.exe before 58.x in Invensys Wonderware SuiteLink in the Invensys System Platform software suite, as used in InTouch/Wonderware Application Server IT before 10.5 and WAS before 3.5, DASABCIP before 4.1 SP2, DASSiDirect before 3.0, DAServer Runtime Components...

CVE-2012-3847

slssvc.exe in Invensys Wonderware SuiteLink in Invensys InTouch 2012 and Wonderware Application Server 2012 allows remote attackers to cause a denial of service resource consumption via a long Unicode string, a different vulnerability than CVE-2012-3007...

Design/Logic Flaw

slssvc.exe in Invensys Wonderware SuiteLink in Invensys InTouch 2012 and Wonderware Application Server 2012 allows remote attackers to cause a denial of service resource consumption via a long Unicode string, a different vulnerability than CVE-2012-3007...

Stack overflow

Stack-based buffer overflow in slssvc.exe before 58.x in Invensys Wonderware SuiteLink in the Invensys System Platform software suite, as used in InTouch/Wonderware Application Server IT before 10.5 and WAS before 3.5, DASABCIP before 4.1 SP2, DASSiDirect before 3.0, DAServer Runtime Components...

CVE-2012-3847

slssvc.exe in Invensys Wonderware SuiteLink in Invensys InTouch 2012 and Wonderware Application Server 2012 allows remote attackers to cause a denial of service resource consumption via a long Unicode string, a different vulnerability than CVE-2012-3007...

CVE-2012-3847

CVE-2012-3847 affects Invensys Wonderware SuiteLink (slssvc.exe) in InTouch 2012 and Wonderware Application Server 2012. An unauthenticated remote attacker can cause a DoS by sending a long Unicode string, consuming resources. Affected SuiteLink components and versions align with the NVD entry fo...

CVE-2012-3007

Stack-based buffer overflow in slssvc.exe before 58.x in Invensys Wonderware SuiteLink in the Invensys System Platform software suite, as used in InTouch/Wonderware Application Server IT before 10.5 and WAS before 3.5, DASABCIP before 4.1 SP2, DASSiDirect before 3.0, DAServer Runtime Components...

CVE-2012-3007

CVE-2012-3007 describes a stack-based buffer overflow in slssvc.exe used by Wonderware SuiteLink within Invensys System Platform (affecting InTouch/Wonderware Application Server IT prior to 10.5, WAS prior to 3.5, DASABCIP prior to 4.1 SP2, DASSiDirect prior to 3.0, and DAServer Runtime Component...

CVE-2012-0228

Invensys Wonderware Information Server 4.0 SP1 and 4.5 does not properly implement client controls, which allows remote attackers to bypass intended access restrictions via unspecified vectors...

CVE-2012-0226

SQL injection vulnerability in Invensys Wonderware Information Server 4.0 SP1 and 4.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-0225

Cross-site scripting XSS vulnerability in Invensys Wonderware Information Server 4.0 SP1 and 4.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Invensys Wonderware Information Server 4.0 SP1 and 4.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Heap overflow

Heap-based buffer overflow in the WWCabFile ActiveX component in the Wonderware System Platform in Invensys Wonderware Application Server 2012 and earlier, Foxboro Control Software 3.1 and earlier, InFusion CE/FE/SCADA 2.5 and earlier, Wonderware Information Server 4.5 and earlier, ArchestrA...

Sql injection

SQL injection vulnerability in Invensys Wonderware Information Server 4.0 SP1 and 4.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Heap overflow

Heap-based buffer overflow in the WWCabFile ActiveX component in the Wonderware System Platform in Invensys Wonderware Application Server 2012 and earlier, Foxboro Control Software 3.1 and earlier, InFusion CE/FE/SCADA 2.5 and earlier, Wonderware Information Server 4.5 and earlier, ArchestrA...

CVE-2012-0257

The CVE-2012-0257 issue is a heap-based buffer overflow in the WWCabFile ActiveX component used by Wonderware System Platform and several associated products (e.g., Wonderware Application Server 2012, Foxboro Control Software 3.1, InFusion CE/FE/SCADA 2.5, Wonderware Information Server 4.5, Arche...

CVE-2012-0228

CVE-2012-0228 affects Invensys Wonderware Information Server 4.0 SP1 and 4.5 (Portal and Client). The vulnerability stems from security access permissions issues in client controls, which could allow a remote attacker to cause a denial of service. ICS-CERT notes multiple vulnerabilities across th...