Skip to main content

Intouch CVE-2012-3005

MEDIUM
2012-07-26 ics-cert@hq.dhs.gov
Information Disclosure Intouch Wonderware Inbatch Wonderware Information Server Foxboro Control Software Intouch Wonderware Application Server Infusion Ce Fe Scada Wonderware Historian Invensys
6.9
CVSS 2.0 · NVD
Share

Severity by source

NVD PRIMARY
6.9 MEDIUM
AV:L/AC:M/Au:N/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
M
Confidentiality
C
Integrity
C
Availability
C

Lifecycle Timeline

1
CVE Published
Jul 26, 2012 - 10:41 cve.org
MEDIUM 6.9

DescriptionCVE.org

Untrusted search path vulnerability in Invensys Wonderware InTouch 2012 and earlier, as used in Wonderware Application Server, Wonderware Information Server, Foxboro Control Software, InFusion CE/FE/SCADA, InBatch, and Wonderware Historian, allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.

AnalysisAI

Untrusted search path vulnerability in Invensys Wonderware InTouch 2012 and earlier, as used in Wonderware Application Server, Wonderware Information Server, Foxboro Control Software, InFusion. Rated medium severity (CVSS 6.9). No vendor patch available.

Technical ContextAI

Untrusted search path vulnerability in Invensys Wonderware InTouch 2012 and earlier, as used in Wonderware Application Server, Wonderware Information Server, Foxboro Control Software, InFusion CE/FE/SCADA, InBatch, and Wonderware Historian, allows local users to gain privileges via a Trojan horse DLL in an unspecified directory. Affected products include: Invensys Foxboro Control Software, Invensys Infusion Ce\/Fe\/Scada, Invensys Intouch, Invensys Intouch\/Wonderware Application Server, Invensys Wonderware Historian.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Intouch

View all
CVE-2023-33873 HIGH
7.8 Nov 15

This privilege escalation vulnerability, if exploited, cloud allow a local OS-authenticated user with standard privilege
CVE-2012-0258 MEDIUM
6.8 Apr 02

Heap-based buffer overflow in the WWCabFile ActiveX component in the Wonderware System Platform in Invensys Wonderware A
CVE-2012-0257 MEDIUM
6.8 Apr 02

Heap-based buffer overflow in the WWCabFile ActiveX component in the Wonderware System Platform in Invensys Wonderware A
CVE-2023-34982 HIGH
7.1 Nov 15

This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to
CVE-2012-3847 MEDIUM
5.0 Jul 05

slssvc.exe in Invensys Wonderware SuiteLink in Invensys InTouch 2012 and Wonderware Application Server 2012 allows remot
CVE-2015-1009 LOW
1.7 Aug 01

Schneider Electric InduSoft Web Studio before 7.1.3.5 Patch 5 and Wonderware InTouch Machine Edition through 7.1 SP3 Pat

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2012-3005 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy