CVE-2007-6033 Invensys Wonderware InTouch 8.0 creates a NetDDE share with insecure permissions (Everyone/Full Control), which allows remote authenticated attackers, and possibly anonymous users, to execute arbitrar...
HighCVSS 8.8
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Invensys Wonderware InTouch 8.0 creates a NetDDE share with insecure permissions (Everyone/Full Control), which allows remote authenticated attackers, and possibly anonymous users, to execute arbitrary programs.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wonderware intouch | = 8.0 | No fix listed |
References
- 42398 broken-link vdb-entry
- pacwest.wonderware.com broken-link
- 27751 broken-link third-party-advisory vendor-advisory
- www.digitalbond.com not-applicable
- VU#138633 third-party-advisory us-government-resource
- 26496 broken-link third-party-advisory vdb-entry