Invensys Wonderware Intouch vulnerabilities

2 CVEs affecting Invensys Wonderware Intouch, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-4709, published 2013-10-13.

More from Invensys.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2012-4709, published 2013-10-13. Medium severity, CVSS 6.9. EPSS: 0.6% chance of exploitation in the next 30 days. Invensys Wonderware InTouch HMI 2012 R2 and earlier allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption)…
• CVE-2012-4693, published 2012-12-18. Low severity, CVSS 1.9. EPSS: 0.2% chance of exploitation in the next 30 days. Invensys Wonderware InTouch 2012 R2 and earlier and Siemens ProcessSuite use a weak encryption algorithm for data in Ps_security.ini, which makes it easier for local users to discover passwords by…