Invensys Wonderware Information Server 4.0 SP1 and 4.5 does not properly implement client controls, which allows remote attackers to bypass intended access restrictions via unspecified vectors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Wonderware_information_server | Invensys | 4.0-sp1 (including) | 4.0-sp1 (including) |
| Wonderware_information_server | Invensys | 4.5 (including) | 4.5 (including) |
References
- http://osvdb.org/80890
- http://secunia.com/advisories/48603
- http://www.securityfocus.com/bid/52851
- http://www.securitytracker.com/id?1026886
- http://www.securitytracker.com/id?1026887
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-062-01.pdf
- http://osvdb.org/80890
- http://secunia.com/advisories/48603
- http://www.securityfocus.com/bid/52851
- http://www.securitytracker.com/id?1026886
- http://www.securitytracker.com/id?1026887
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-062-01.pdf