Vulnerabilities

TI-2015-00921 CVE-2015-1009 · GHSA-h9m2-392c-p78g

Schneider Electric InduSoft Web Studio before 7.1.3.5 Patch 5 and Wonderware InTouch…

LOW 9

Schneider Electric InduSoft Web Studio before 7.1.3.5 Patch 5 and Wonderware InTouch Machine Edition through 7.1 SP3 Patch 4 use cleartext for project-window password storage, which allows local users to obtain sensitive…

CVSS 2.0LOW 1.7 Local Low privileges Interaction — EPSS 0.00315 Published 2015-08-01 No fix listed CWE-200

TI-2008-01928 CVE-2008-2005 · GHSA-r887-hfp4-4397

The SuiteLink Service (aka slssvc.exe) in WonderWare SuiteLink before 2.0 Patch 01, as…

LOW 39

The SuiteLink Service (aka slssvc.exe) in WonderWare SuiteLink before 2.0 Patch 01, as used in WonderWare InTouch 8.0, allows remote attackers to cause a denial of service (NULL pointer dereference and service shutdown)…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.1632 Published 2008-05-06 No fix listed CWE-399

TI-2007-05768 CVE-2007-6033 · GHSA-rq5m-jv7g-wwv9

Invensys Wonderware InTouch 8.0 creates a NetDDE share with insecure permissions…

MEDIUM 44

Invensys Wonderware InTouch 8.0 creates a NetDDE share with insecure permissions (Everyone/Full Control), which allows remote authenticated attackers, and possibly anonymous users, to execute arbitrary programs.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03 Published 2007-11-20 No fix listed CWE-732

Vulnerabilities

Filters

Schneider Electric InduSoft Web Studio before 7.1.3.5 Patch 5 and Wonderware InTouch…

The SuiteLink Service (aka slssvc.exe) in WonderWare SuiteLink before 2.0 Patch 01, as…

Invensys Wonderware InTouch 8.0 creates a NetDDE share with insecure permissions…