Wonderware Information Server

CVEs (1)

Remediations

• Invensys has developed a patch that fully resolves this vulnerability. This patch has been confirmed by the researchers. Customers of Invensys running vulnerable versions of Information Server can update their systems to the most recent patch release by following the steps provided by Invensys.
• In addition to applying this patch, Invensys has made additional recommendations to customers running vulnerable versions of the Information Server product. Log onto Cyber Security Updates site where Invensys provides information and useful links related to their security updates. Set the security level settings in the Internet browser to Medium−High to minimize the risk of an exploit of the vulnerability. For information regarding how to secure industrial control systems operating in a Microsoft Windows environment, please reference the Invensys Securing Industrial Control Systems Guide. (http://www.wonderware.com/support/mmi/esupport/securitycentral/documents/BestPractices/WWSecGd041707_External.pdf)

Affected Vendors

Affected Products (3)