Description
SQL injection vulnerability in Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | Wonderware Information Server Portal | 4.0 SP1, 4.5, 5.0, 5.5 | — |
Advisories 1
- ICSA-14-238-02 Schneider Electric Wonderware Vulnerabilities CISA ICS & IT advisories · Jun 6, 2025