Wonderware

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Wonderware records in CISA KEV

No Wonderware vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Intouch 3 records MEDIUM Suitelink 1 record LOW

Records

3 records in Intouch · all components

TI-2007-05768 CVE-2007-6033 · GHSA-rq5m-jv7g-wwv9

Invensys Wonderware InTouch 8.0 creates a NetDDE share with insecure permissions…

MEDIUM 44

Invensys Wonderware InTouch 8.0 creates a NetDDE share with insecure permissions (Everyone/Full Control), which allows remote authenticated attackers, and possibly anonymous users, to execute arbitrary programs.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03 Published 2007-11-20 No fix listed CWE-732

TI-2008-01928 CVE-2008-2005 · GHSA-r887-hfp4-4397

The SuiteLink Service (aka slssvc.exe) in WonderWare SuiteLink before 2.0 Patch 01, as…

LOW 39

The SuiteLink Service (aka slssvc.exe) in WonderWare SuiteLink before 2.0 Patch 01, as used in WonderWare InTouch 8.0, allows remote attackers to cause a denial of service (NULL pointer dereference and service shutdown)…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.1632 Published 2008-05-06 No fix listed CWE-399

TI-2015-00921 CVE-2015-1009 · GHSA-h9m2-392c-p78g

Schneider Electric InduSoft Web Studio before 7.1.3.5 Patch 5 and Wonderware InTouch…

LOW 9

Schneider Electric InduSoft Web Studio before 7.1.3.5 Patch 5 and Wonderware InTouch Machine Edition through 7.1 SP3 Patch 4 use cleartext for project-window password storage, which allows local users to obtain sensitive…

CVSS 2.0LOW 1.7 Local Low privileges Interaction — EPSS 0.00315 Published 2015-08-01 No fix listed CWE-200

Open these records in search →

Critical	0
High	1
Medium	1
Low	1
No CVSS	0