Vulnerabilities > Invensys > Intouch > 2012

DATE CVE VULNERABILITY TITLE RISK
2012-07-26 CVE-2012-3005 Unspecified vulnerability in Invensys products
Untrusted search path vulnerability in Invensys Wonderware InTouch 2012 and earlier, as used in Wonderware Application Server, Wonderware Information Server, Foxboro Control Software, InFusion CE/FE/SCADA, InBatch, and Wonderware Historian, allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.
local
invensys
6.9
2012-07-05 CVE-2012-3847 Resource Management Errors vulnerability in Invensys Intouch and Wonderware Application Server
slssvc.exe in Invensys Wonderware SuiteLink in Invensys InTouch 2012 and Wonderware Application Server 2012 allows remote attackers to cause a denial of service (resource consumption) via a long Unicode string, a different vulnerability than CVE-2012-3007.
network
low complexity
invensys CWE-399
5.0