CVE-2012-0228

Published: Apr 2, 2012Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Invensys Wonderware Information Server 4.0 SP1 and 4.5 does not properly implement client controls, which allows remote attackers to bypass intended access restrictions via unspecified vectors.

Affected (2)

Products: Invensys: Wonderware Information Server

Invensys

1 product

Wonderware Information Server

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Invensys Wonderware Information Server	Version 4.0 sp1
Invensys Wonderware Information Server	Version 4.5

Related CWEs

CWE-264

References (12)

http://osvdb.org/80890

Source: cret@cert.org

http://secunia.com/advisories/48603

Source: cret@cert.org

http://www.securityfocus.com/bid/52851

Source: cret@cert.org

http://www.securitytracker.com/id?1026886

Source: cret@cert.org

http://www.securitytracker.com/id?1026887

Source: cret@cert.org

http://www.us-cert.gov/control_systems/pdf/ICSA-12-062-01.pdf

Source: cret@cert.org

US Government Resource

http://osvdb.org/80890