Description
SQL injection vulnerability in Invensys Wonderware Information Server 4.0 SP1 and 4.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Advisories 1
- ICSA-12-062-01 Wonderware Information Server Multiple Vulnerabilities CISA ICS & IT advisories · Jun 17, 2025
References
- 1026886 vdb-entry
- wis-unspecified-sql-injection(74550) vdb-entry
- 48603 third-party-advisory
- 52851 vdb-entry
- 80889 vdb-entry
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-062-01.pdf
- 1026887 vdb-entry