GCVE - cpe:2.3:a:invensys:foxboro_control_software:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:invensys:foxboro_control_software:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Invensys (`71736450-6408-5b87-8efb-79f5d5ed779e`)
Product	Foxboro Control Software (`1625267f-583e-5269-a42c-e0e827d81065`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-0258`	vulnerable	2026-06-03 14:31:35.112823	Details available Heap-based buffer overflow in the WWCabFile ActiveX component in the Wonderware System Platform in Invensys Wonderware Application Server 2012 and earlier, Foxboro Control Software 3.1 and earlier, InFusion CE/FE/SCADA 2.5 and earlier, Wonderware Information Server 4.5 and earlier, ArchestrA Application Object Toolkit 3.2 and earlier, and InTouch 10.0 through 10.5 might allow remote attackers to execute arbitrary code via a long string to the AddFile member. Published: 2012-04-02T20:00:00.000Z Updated: 2024-08-06T18:16:20.081Z Open on db.gcve.eu Reference links https://wdnresource.wonderware.com/support/docs/_SecurityBulletins/Security_Bulletin_LFSEC00000071.pdf http://osvdb.org/80891 http://secunia.com/advisories/48675 http://www.us-cert.gov/control_systems/pdf/ICSA-12-081-01.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0257`	vulnerable	2026-06-03 14:31:35.104840	Details available Heap-based buffer overflow in the WWCabFile ActiveX component in the Wonderware System Platform in Invensys Wonderware Application Server 2012 and earlier, Foxboro Control Software 3.1 and earlier, InFusion CE/FE/SCADA 2.5 and earlier, Wonderware Information Server 4.5 and earlier, ArchestrA Application Object Toolkit 3.2 and earlier, and InTouch 10.0 through 10.5 might allow remote attackers to execute arbitrary code via a long string to the Open member, leading to a function-pointer overwrite. Published: 2012-04-02T20:00:00.000Z Updated: 2024-08-06T18:16:20.093Z Open on db.gcve.eu Reference links https://wdnresource.wonderware.com/support/docs/_SecurityBulletins/Security_Bulletin_LFSEC00000071.pdf http://osvdb.org/80891 http://secunia.com/advisories/48675 http://www.us-cert.gov/control_systems/pdf/ICSA-12-081-01.pdf	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.