CVE-2015-1009

CVE-2015-1009 affects Schneider Electric InduSoft Web Studio (before v7.1.3.5 Patch 5) and Wonderware InTouch Machine Edition (through 7.1 SP3 Patch 4). The vulnerability is information disclosure: project-window passwords are stored in clear text in the configuration file, enabling local users t...

CVE-2008-2005

Affected software: WonderWare SuiteLink (slssvc.exe) before version 2.0 Patch 01, used with WonderWare InTouch 8.0. Vulnerability: A remote attacker can send a malformed Registration packet to TCP port 5413 that contains an abnormally large length value, triggering a memory allocation failure (NU...

CVE-2007-6033

Invensys Wonderware InTouch 8.0 is affected by an insecure NetDDE share that grants Everyone/Full Control, enabling remote authenticated (and possibly anonymous) attackers to execute arbitrary programs. The root cause is the NetDDE share permissions misconfiguration, allowing remote code executio...