EUVD-2014-9015

Malware in sbrugna...

EUVD-2017-14267

Malware in sbrugna...

CVE-2012-4709

Invensys Wonderware InTouch HMI 2012 R2 and earlier allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service CPU and memory consumption via an XML document containing an external entity declaration in conjunction with an entity referenc...

Wonderware InTouch Buffer Overflow

The vulnerability of the application development module for HMI Window Maker in Wonderware InTouch SCADA systems is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to reassign the return address and trigger an emergency shutdown using a specially craft...

Wonderware InTouch Buffer Overflow

The vulnerability of the application development module for HMI Window Maker in Wonderware InTouch systems is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to cause an emergency shutdown of the system using a specially crafted file...

PT-2020-6054

Name of the Vulnerable Software and Affected Versions Wonderware InTouch affected versions not specified Description The issue is related to a buffer overflow in the stack of the HMI Window Maker SCADA system's application development module. Exploitation of this issue could allow an attacker to...

PT-2020-6055

Name of the Vulnerable Software and Affected Versions Wonderware InTouch affected versions not specified Description The issue is related to a buffer copy without checking the size of the input data in the application development module for the HMI Window Maker SCADA system. Exploitation of this...

PT-2020-6053

Name of the Vulnerable Software and Affected Versions Wonderware InTouch affected versions not specified Description The issue is related to a buffer overflow in the heap of the HMI Window Maker SCADA system's application development module. Exploitation of this issue could allow an attacker to...

CVE-2017-5156

A Cross-Site Request Forgery issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. The client request may be forged from a different site. This will allow an external site to access internal RDP systems on behalf of the currently logged in user...

CVE-2017-5160

An Inadequate Encryption Strength issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. The software will connect via Transport Layer Security without verifying the peer's SSL certificate properly...

CVE-2017-5158

An Information Exposure issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. Credentials may be exposed to external systems via specific URL parameters, as arbitrary destination addresses may be specified...

CVE-2017-5160

An Inadequate Encryption Strength issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. The software will connect via Transport Layer Security without verifying the peer's SSL certificate properly...

CVE-2017-5158

An Information Exposure issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. Credentials may be exposed to external systems via specific URL parameters, as arbitrary destination addresses may be specified...

CVE-2017-5156

Schneider Electric Wonderware InTouch Access Anywhere (affected >= 11.5.2) is vulnerable to CVE-2017-5156: Cross-Site Request Forgery that can allow a remote attacker on a different site to access internal RDP systems on behalf of a logged-in user. The vulnerability stems from CSRF in the web-...

CVE-2017-5156

A Cross-Site Request Forgery issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. The client request may be forged from a different site. This will allow an external site to access internal RDP systems on behalf of the currently logged in user...

PT-2017-16352

Name of the Vulnerable Software and Affected Versions Schneider Electric Wonderware InTouch Access Anywhere versions prior to 11.5.2 Description An Information Exposure issue allows credentials to be exposed to external systems via specific URL parameters. This is possible because arbitrary...

CVE-2017-5156: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. The client request may be forged from a different site. This will allow an external site to access internal RDP systems on behalf of the currently logged in user...

PT-2017-16354

Name of the Vulnerable Software and Affected Versions Schneider Electric Wonderware InTouch Access Anywhere versions prior to 11.5.2 Description The issue is related to inadequate encryption strength. Specifically, the software connects via Transport Layer Security without properly verifying the...

PT-2017-16350

Name of the Vulnerable Software and Affected Versions Schneider Electric Wonderware InTouch Access Anywhere versions prior to 11.5.2 Description A Cross-Site Request Forgery issue allows an external site to access internal RDP systems on behalf of the currently logged in user by forging client...

CVE-2017-5158: Exposure of Sensitive Information to an Unauthorized Actor

An Information Exposure issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. Credentials may be exposed to external systems via specific URL parameters, as arbitrary destination addresses may be specified...