Wonderware Intouch
7 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Wonderware Intouch, a product in the ics ot iot space. Use it to gauge the current risk picture and drill into individual advisories.
Wonderware Intouch CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 7 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical2
- Medium1
- Low4
Latest CVEs
The 7 most recently published vulnerabilities affecting Wonderware Intouch.
- BDU:2021-02849Уязвимость модуля разработки приложений для HMI Window Maker SCADA-системы Wonderware InTouch, связанная с переполнением буфера в куче, позволяющая нарушителю вызвать аварийное завершение работы2.9
- BDU:2021-02851Уязвимость модуля разработки приложений для HMI Window Maker SCADA-системы Wonderware InTouch, связанная с копированием буфера без проверки размера входных данных, позволяющая нарушителю вызвать аварийное завершение работы2.9
- BDU:2021-02850Уязвимость модуля разработки приложений для HMI Window Maker SCADA-системы Wonderware InTouch, связанная с переполнением буфера в стеке, позволяющая нарушителю вызвать аварийное завершение работы2.9
- CVE-2017-14024A Stack-based Buffer Overflow issue was discovered in Schneider Electric InduSoft Web Studio v8.0 SP2 Patch 1 and prior versions, and InTouch Machine Edition v8.0 SP2 Patch 1 and prior versions. Th...9.8
- CVE-2017-13997A Missing Authentication for Critical Function issue was discovered in Schneider Electric InduSoft Web Studio v8.0 SP2 or prior, and InTouch Machine Edition v8.0 SP2 or prior. InduSoft Web Studio p...9.8
- CVE-2012-4709Invensys Wonderware InTouch HMI 2012 R2 and earlier allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption...6.9
- CVE-2012-4693Invensys Wonderware InTouch 2012 R2 and earlier and Siemens ProcessSuite use a weak encryption algorithm for data in Ps_security.ini, which makes it easier for local users to discover passwords by ...1.9
Product grouping is registry-driven, with AI assist and human review. How it works