CVE-2012-3005

Published: Jul 26, 2012Modified: Apr 29, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

Untrusted search path vulnerability in Invensys Wonderware InTouch 2012 and earlier, as used in Wonderware Application Server, Wonderware Information Server, Foxboro Control Software, InFusion CE/FE/SCADA, InBatch, and Wonderware Historian, allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected (14)

Products: Invensys: Foxboro Control Software, Infusion Ce/fe/scada, Intouch, Intouch/wonderware Application Server, Wonderware Historian, Wonderware Inbatch, Wonderware Information Server

Invensys

7 products

Foxboro Control Software

Infusion Ce/fe/scada

Intouch

Intouch/wonderware Application Server

Wonderware Historian

Wonderware Inbatch

Wonderware Information Server

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Invensys Foxboro Control Software	Version 3.1
Invensys Foxboro Control Software	Version 4.0
Invensys Infusion Ce/fe/scada	Up to 2.5
Invensys Intouch	Up to 2012
Invensys Intouch/wonderware Application Server	Up to 2012
Invensys Intouch/wonderware Application Server	Version 10.0
Invensys Intouch/wonderware Application Server	Version 10.5
Invensys Wonderware Historian	Up to 10.0
Invensys Wonderware Historian	Version 10.0
Invensys Wonderware Inbatch	Up to 9.5
Invensys Wonderware Information Server	Up to 4.5
Invensys Wonderware Information Server	Version 3.1
Invensys Wonderware Information Server	Version 4.0
Invensys Wonderware Information Server	Version 4.0 sp1

References (2)

http://www.us-cert.gov/control_systems/pdf/ICSA-12-177-02.pdf

Source: ics-cert@hq.dhs.gov

US Government Resource

http://www.us-cert.gov/control_systems/pdf/ICSA-12-177-02.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

Timeline

No history available yet.