VULNERABILITY INTELLIGENCE
CVE-2012-4693
CVSS score1.9 LOW
EPSS probability0.23%
CISA KEVNot currently listed
Published2012-12-18
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:P/I:N/A:N
Description
Invensys Wonderware InTouch 2012 R2 and earlier and Siemens ProcessSuite use a weak encryption algorithm for data in Ps_security.ini, which makes it easier for local users to discover passwords by reading this file.
Primary references
- ics-cert@hq.dhs.gov — Vendor Advisory
- ics-cert@hq.dhs.gov — US Government Resource
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — US Government Resource