CVE-2012-4693

LOW 1.9CVE-2012-4693 · Published 18/12/2012 · updated 16/06/2026

In short

CVE-2012-4693 is a LOW (CVSS 1.9) vulnerability affecting wonderware intouch (invensys).
Chance of exploitation in the next 30 days (EPSS): 0.23%, higher than 13.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
wonderware intouch invensys	`≤ 2012`	No fix yet

Description

Invensys Wonderware InTouch 2012 R2 and earlier and Siemens ProcessSuite use a weak encryption algorithm for data in Ps_security.ini, which makes it easier for local users to discover passwords by reading this file.

References

siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-370812.pdf · Vendor Advisory
us-cert.gov/control_systems/pdf/ICSA-12-348-01.pdf · US Government Resource

More vulnerabilities in wonderware intouch

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free