CVE-2012-3005

Untrusted search path vulnerability in Invensys Wonderware InTouch 2012 and earlier, as used in Wonderware Application Server, Wonderware Information Server, Foxboro Control Software, InFusion CE/FE/SCADA, InBatch, and Wonderware Historian, allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.

Score

CVSS 2.0 6.9 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2012-07-26

Last modified

2024-09-17

Affected products

• Foxboro Control Software (Invensys)
• Infusion Ce/fe/scada (Invensys)
• Intouch (Invensys)
• Intouch/wonderware Application Server (Invensys)
• Wonderware Historian (Invensys)
• Wonderware Inbatch (Invensys)
• Wonderware Information Server (Invensys)

References

• http://www.us-cert.gov/control_systems/pdf/ICSA-12-177-02.pdf