Vulnerabilities > Invensys > Wonderware Inbatch > 9.5

DATE CVE VULNERABILITY TITLE RISK
2012-07-26 CVE-2012-3005 Unspecified vulnerability in Invensys products
Untrusted search path vulnerability in Invensys Wonderware InTouch 2012 and earlier, as used in Wonderware Application Server, Wonderware Information Server, Foxboro Control Software, InFusion CE/FE/SCADA, InBatch, and Wonderware Historian, allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.
local
invensys
6.9
2012-01-08 CVE-2011-4870 Buffer Errors vulnerability in Invensys Wonderware Inbatch 8.1/9.0/9.5
Multiple buffer overflows in the (1) GUIControls, (2) BatchObjSrv, and (3) BatchSecCtrl ActiveX controls in Invensys Wonderware InBatch 9.0 and 9.0 SP1, and InBatch 8.1 SP1, 9.0 SP2, and 9.5 Server and Runtime Clients, allow remote attackers to execute arbitrary code via a long string in a property value, a different issue than CVE-2011-3141.
network
invensys CWE-119
6.8