CVE-2012-4693 Invensys Wonderware InTouch 2012 R2 and earlier and Siemens ProcessSuite use a weak encryption algorithm for data in Ps_security.ini, which makes it easier for local users to discover passwords by rea...
LowCVSS 1.9
EPSS 0.23%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Invensys Wonderware InTouch 2012 R2 and earlier and Siemens ProcessSuite use a weak encryption algorithm for data in Ps_security.ini, which makes it easier for local users to discover passwords by reading this file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| invensys wonderware intouch | <= 2012 | No fix listed |
| Siemens processsuite | All versions | No fix listed |
References
- www.siemens.com vendor-advisory
- www.us-cert.gov us-government-resource