CVE-2012-3005

First published: Thu Jul 26 2012(Updated: )

Untrusted search path vulnerability in Invensys Wonderware InTouch 2012 and earlier, as used in Wonderware Application Server, Wonderware Information Server, Foxboro Control Software, InFusion CE/FE/SCADA, InBatch, and Wonderware Historian, allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.

Credit: ics-cert@hq.dhs.gov

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/references
• agent/severity
• agent/author
• agent/type
• agent/event
• agent/last-modified-date
• agent/softwarecombine
• agent/first-publish-date
• agent/description
• agent/tags
• collector/mitre-cve
• source/MITRE
• vendor/invensys
• canonical/invensys foxboro control software
• version/invensys foxboro control software/3.1
• version/invensys foxboro control software/4.0
• canonical/invensys infusion ce\/fe\/scada
• version/invensys infusion ce\/fe\/scada/2.5
• canonical/invensys intouch
• version/invensys intouch/2012
• canonical/invensys intouch\/wonderware application server
• version/invensys intouch\/wonderware application server/2012
• version/invensys intouch\/wonderware application server/10.0
• version/invensys intouch\/wonderware application server/10.5
• canonical/invensys wonderware historian
• version/invensys wonderware historian/10.0
• canonical/invensys wonderware inbatch
• version/invensys wonderware inbatch/9.5
• canonical/invensys wonderware information server
• version/invensys wonderware information server/4.5
• version/invensys wonderware information server/3.1
• version/invensys wonderware information server/4.0
• version/invensys wonderware information server/4.0-sp1