Invensys Vulnerabilidad

Cronología

Escribe

Not Defined22
Application Server Software2

Producto

Invensys Wonderware Information Server10
Invensys Wonderware InBatch6
Invensys ArchestrA Application Object Toolkit4
Invensys Wonderware Application Server2
Invensys Wonderware Win-XML Exporter2

Contramedidas

Official Fix2
Temporary Fix0
Workaround0
Unavailable0
Not Defined22

Explotabilidad

High0
Functional0
Proof-of-Concept2
Unproven0
Not Defined22

Vector de acceso

Not Defined0
Physical0
Local4
Adjacent0
Network20

Autenticación

Not Defined0
High0
Low0
None24

La interacción del usuario

Not Defined0
Required4
None20

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤44
≤54
≤62
≤70
≤86
≤90
≤108

CVSSv3 Temp

≤10
≤20
≤30
≤44
≤54
≤62
≤70
≤86
≤90
≤108

VulDB

≤10
≤20
≤30
≤44
≤54
≤62
≤70
≤86
≤90
≤108

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k0
<2k12
<5k12
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar hoy

<1k24
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Products (7): ArchestrA Application Object Toolkit (2), Wonderware Application Server (3), Wonderware InBatch (3), Wonderware InTouch (1), Wonderware Inbatch (1), Wonderware Information Server (13), Wonderware Win-XML Exporter (1)

Fecha de publicaciónBaseTempVulnerabilidadProdExpConEPSSCTICVE
2014-08-277.37.3Invensys Wonderware Information Server sql injectionDesconocidoNot DefinedNot Defined0.001190.00CVE-2014-5399
2014-08-274.04.0Invensys Wonderware Information Server escalada de privilegiosDesconocidoNot DefinedNot Defined0.001630.00CVE-2014-5398
2014-08-274.34.3Invensys Wonderware Information Server cross site scriptingDesconocidoNot DefinedNot Defined0.002020.00CVE-2014-5397
2014-08-274.04.0Invensys Wonderware Information Server Encryption cifrado débilDesconocidoNot DefinedNot Defined0.000420.00CVE-2014-2381
2014-08-277.57.5Invensys Wonderware Information Server Encryption cifrado débilDesconocidoNot DefinedNot Defined0.005150.00CVE-2014-2380
2013-10-138.48.4Invensys Wonderware InTouch desbordamiento de búferDesconocidoNot DefinedNot Defined0.001140.00CVE-2012-4709
2013-05-094.34.3Invensys Wonderware Information Server cross site scriptingDesconocidoNot DefinedNot Defined0.001630.00CVE-2013-0688
2013-05-099.89.8Invensys Wonderware Information Server escalada de privilegiosDesconocidoNot DefinedNot Defined0.002490.00CVE-2013-0686
2013-05-0910.010.0Invensys Wonderware Information Server escalada de privilegiosDesconocidoNot DefinedNot Defined0.003210.00CVE-2013-0685
2013-05-097.37.3Invensys Wonderware Information Server sql injectionDesconocidoNot DefinedNot Defined0.001030.00CVE-2013-0684

14 no se muestran más entradas

🔒 Login Required

You need to signup and login to see more of the remaining 14 results.

◂ AnteriorVisión De ConjuntoPróximo ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!