Invensys Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

Not Defined	22
Application Server Software	2

Product

Invensys Wonderware Information Server	14
Invensys Wonderware InBatch	4
Invensys Wonderware InTouch	2
Invensys Wonderware Application Server	2
Invensys ArchestrA Application Object Toolkit	2

Remediation

Official Fix	2
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	22

Exploitability

High	0
Functional	0
Proof-of-Concept	2
Unproven	0
Not Defined	22

Access Vector

Not Defined	0
Physical	0
Local	4
Adjacent	0
Network	20

Authentication

Not Defined	0
High	0
Low	0
None	24

User Interaction

Not Defined	0
Required	2
None	22

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	2
≤5	2
≤6	2
≤7	0
≤8	10
≤9	2
≤10	6

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	2
≤5	2
≤6	2
≤7	0
≤8	10
≤9	2
≤10	6

VulDB

≤1	0
≤2	0
≤3	0
≤4	2
≤5	2
≤6	2
≤7	0
≤8	10
≤9	2
≤10	6

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Vendor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	0
<2k	10
<5k	14
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Today

<1k	24
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Market Volume

🔴 CTI Activities

Affected Products (7): ArchestrA Application Object Toolkit (2), Wonderware Application Server (3), Wonderware InBatch (3), Wonderware InTouch (1), Wonderware Inbatch (1), Wonderware Information Server (13), Wonderware Win-XML Exporter (1)

Published	Base	Temp	Vulnerability	Prod	Exp	Rem	EPSS	CVE
08/27/2014	7.3	7.3	Invensys Wonderware Information Server sql injection	Unknown	Not Defined	Not Defined	0.00119	CVE-2014-5399
08/27/2014	4.0	4.0	Invensys Wonderware Information Server input validation	Unknown	Not Defined	Not Defined	0.00163	CVE-2014-5398
08/27/2014	4.3	4.3	Invensys Wonderware Information Server cross site scripting	Unknown	Not Defined	Not Defined	0.00202	CVE-2014-5397
08/27/2014	4.0	4.0	Invensys Wonderware Information Server Encryption missing encryption	Unknown	Not Defined	Not Defined	0.00042	CVE-2014-2381
08/27/2014	7.5	7.5	Invensys Wonderware Information Server Encryption missing encryption	Unknown	Not Defined	Not Defined	0.00515	CVE-2014-2380
10/13/2013	8.4	8.4	Invensys Wonderware InTouch memory corruption	Unknown	Not Defined	Not Defined	0.00121	CVE-2012-4709
05/09/2013	4.3	4.3	Invensys Wonderware Information Server cross site scripting	Unknown	Not Defined	Not Defined	0.00163	CVE-2013-0688
05/09/2013	9.8	9.8	Invensys Wonderware Information Server input validation	Unknown	Not Defined	Not Defined	0.00265	CVE-2013-0686
05/09/2013	10.0	10.0	Invensys Wonderware Information Server access control	Unknown	Not Defined	Not Defined	0.00334	CVE-2013-0685
05/09/2013	7.3	7.3	Invensys Wonderware Information Server sql injection	Unknown	Not Defined	Not Defined	0.00103	CVE-2013-0684

14 more entries are not shown

🔒 Login Required

You need to signup and login to see more of the remaining 14 results.

◂ PreviousOverviewNext ▸

Interested in the pricing of exploits?

See the underground prices here!