VULNERABILITY INTELLIGENCE
CVE-2012-3005
CVSS score6.9 MEDIUM
EPSS probability0.45%
CISA KEVNot currently listed
Published2012-07-26
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:C/I:C/A:C
Description
Untrusted search path vulnerability in Invensys Wonderware InTouch 2012 and earlier, as used in Wonderware Application Server, Wonderware Information Server, Foxboro Control Software, InFusion CE/FE/SCADA, InBatch, and Wonderware Historian, allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.
Primary references
- ics-cert@hq.dhs.gov — US Government Resource
- af854a3a-2127-422b-91ae-364da2661108 — US Government Resource