Invensys vulnerabilities

Products

• Wonderware Information Server 16
• Wonderware Application Server 5
• Intouch 4
• Wonderware Inbatch 4
• Foxboro Control Software 3
• Archestra Application Object Toolkit 2
• Infusion Control Edition 2
• Infusion Foundation Edition 2
• Infusion Scada 2
• Intouch\/wonderware Application Server 2
• Wonderware Hmi Reports 2
• Wonderware Intouch 2

Newest

• invensys wonderware information server, schneider electric wonderware information server portal +1 more Schneider Electric Wonderware SQL Injection CVE-2014-5399 7.5 August 28, 2014
• invensys wonderware information server, schneider electric wonderware information server portal +1 more Schneider Electric Wonderware Input Validation CVE-2014-5398 2.1 August 28, 2014
• invensys wonderware information server, schneider electric wonderware information server portal +1 more Schneider Electric Wonderware Cross-site Scripting CVE-2014-5397 7.5 August 28, 2014
• invensys wonderware information server, schneider electric wonderware information server portal +1 more Schneider Electric Wonderware Inadequate Encryption Strength CVE-2014-2381 2.1 August 28, 2014
• invensys wonderware information server, schneider electric wonderware information server portal +1 more Schneider Electric Wonderware Inadequate Encryption Strength CVE-2014-2380 7.8 August 28, 2014
• invensys wonderware intouch Invensys Wonderware InTouch HMI 2012 R2 and earlier allows remote attackers to read arbitrary... CVE-2012-4709 6.9 MediumOctober 13, 2013
• invensys wonderware information server Cross-site scripting (XSS) vulnerability in Invensys Wonderware Information Server (WIS) 4.0... CVE-2013-0688 4.3 MediumMay 9, 2013
• invensys wonderware information server Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal allows... CVE-2013-0686 9.3 HighMay 9, 2013
• invensys wonderware information server Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal does not... CVE-2013-0685 9.3 HighMay 9, 2013
• invensys wonderware information server SQL injection vulnerability in Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5-... CVE-2013-0684 7.5 HighMay 9, 2013
• invensys wonderware win-xml exporter Invensys Wonderware Win-XML Exporter 1522.148.0.0 allows remote attackers to read arbitrary files... CVE-2012-4710 9.3 HighApril 4, 2013
• invensys wonderware intouch, siemens processsuite +1 more Invensys Wonderware InTouch 2012 R2 and earlier and Siemens ProcessSuite use a weak encryption... CVE-2012-4693 1.9 LowDecember 18, 2012
• invensys foxboro control software, intouch, wonderware historian +4 more +6 more Untrusted search path vulnerability in Invensys Wonderware InTouch 2012 and earlier, as used in... CVE-2012-3005 6.9 MediumJuly 26, 2012
• invensys intouch, wonderware application server +1 more slssvc.exe in Invensys Wonderware SuiteLink in Invensys InTouch 2012 and Wonderware Application... CVE-2012-3847 5.0 MediumJuly 5, 2012
• invensys dasabcip, daserver runtime components, dassidirect +2 more +4 more Stack-based buffer overflow in slssvc.exe before 58.x in Invensys Wonderware SuiteLink in the... CVE-2012-3007 5.0 MediumJuly 5, 2012
• invensys archestra application object toolkit, foxboro control software, intouch +5 more +7 more Heap-based buffer overflow in the WWCabFile ActiveX component in the Wonderware System Platform... CVE-2012-0258 6.8 MediumApril 2, 2012
• invensys archestra application object toolkit, foxboro control software, intouch +5 more +7 more Heap-based buffer overflow in the WWCabFile ActiveX component in the Wonderware System Platform... CVE-2012-0257 6.8 MediumApril 2, 2012
• invensys wonderware information server Invensys Wonderware Information Server 4.0 SP1 and 4.5 does not properly implement client... CVE-2012-0228 7.5 HighApril 2, 2012
• invensys wonderware information server SQL injection vulnerability in Invensys Wonderware Information Server 4.0 SP1 and 4.5 allows... CVE-2012-0226 7.5 HighApril 2, 2012
• invensys wonderware information server Cross-site scripting (XSS) vulnerability in Invensys Wonderware Information Server 4.0 SP1 and 4... CVE-2012-0225 4.3 MediumApril 2, 2012
• dreamreport dream report, invensys wonderware hmi reports +1 more Invensys Wonderware HMI Reports 3.42.835.0304 and earlier, as used in Ocean Data Systems Dream... CVE-2011-4039 9.3 HighFebruary 10, 2012
• dreamreport dream report, invensys wonderware hmi reports +1 more Cross-site scripting (XSS) vulnerability in Invensys Wonderware HMI Reports 3.42.835.0304 and... CVE-2011-4038 4.3 MediumFebruary 10, 2012
• invensys wonderware inbatch Multiple buffer overflows in the (1) GUIControls, (2) BatchObjSrv, and (3) BatchSecCtrl ActiveX... CVE-2011-4870 6.8 MediumJanuary 8, 2012
• invensys wonderware inbatch Buffer overflow in the InBatch BatchField ActiveX control for Invensys Wonderware InBatch 8.1 SP1... CVE-2011-3141 9.3 HighAugust 16, 2011
• invensys wonderware information server Multiple stack-based buffer overflows in Invensys Wonderware Information Server 3.1, 4.0, and 4.0... CVE-2011-2962 9.3 HighJuly 29, 2011
• invensys wonderware inbatch, foxboro i\/a series batch +1 more Buffer overflow in the lm_tcp service in Invensys Wonderware InBatch 8.1 and 9.0, as used in... CVE-2010-4557 Public exploit EPSS 12.1% 10.0 HighDecember 17, 2010
• invensys wonderware application server, wonderware archestra configuration access component activex control +1 more Stack-based buffer overflow in the IConfigurationAccess interface in the Invensys Wonderware... CVE-2010-2974 9.3 HighAugust 5, 2010