What’s Vulnerable › Vulnerabilities

CVE-2012-3005

• Severity: medium (CVSS 6.9 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-07-26 · updated 2026-06-16

Description

Untrusted search path vulnerability in Invensys Wonderware InTouch 2012 and earlier, as used in Wonderware Application Server, Wonderware Information Server, Foxboro Control Software, InFusion CE/FE/SCADA, InBatch, and Wonderware Historian, allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected products

• Invensys Foxboro Control Software: 3.1, 4.0
• Invensys Infusion Ce/Fe/Scada: through 2.5
• Invensys Intouch: through 2012
• Invensys Intouch/Wonderware Application Server: through 2012; 10.0, 10.5
• Invensys Wonderware Historian: through 10.0; 10.0
• Invensys Wonderware Inbatch: through 9.5
• Schneider Electric Wonderware Information Server Portal: through 4.5; 3.1, 4.0, 4.0-sp1

References

• http://www.us-cert.gov/control_systems/pdf/ICSA-12-177-02.pdf
• http://www.us-cert.gov/control_systems/pdf/ICSA-12-177-02.pdf

Get alerted when CVE-2012-3005 or the next vulnerability affects your stack