Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal does not restrict unspecified size and amount values, which allows remote attackers to execute arbitrary code or cause a denial of service (resource consumption) via unknown vectors.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Wonderware_information_server | Invensys | 4.0-sp1sp1 (including) | 4.0-sp1sp1 (including) |
| Wonderware_information_server | Invensys | 4.5 (including) | 4.5 (including) |
| Wonderware_information_server | Invensys | 5.0 (including) | 5.0 (including) |