https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-34982.htmlhttps://patchthecve.com/cve/CVE-2023-34982.htmlWed, 17 Jun 2026 06:04:12 +0000MEDIUM 5.5: This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where these products are installed, resulting in denial of service. https://patchthecve.com/cve/CVE-2023-33873.htmlhttps://patchthecve.com/cve/CVE-2023-33873.htmlWed, 17 Jun 2026 06:02:25 +0000HIGH 7.8: This privilege escalation vulnerability, if exploited, cloud allow a local OS-authenticated user with standard privileges to escalate to System privilege on the machine where these products are installed, resulting in complete compromise of the target machine. https://patchthecve.com/cve/CVE-2015-1009.htmlhttps://patchthecve.com/cve/CVE-2015-1009.htmlWed, 17 Jun 2026 00:21:38 +0000LOW 1.7: Schneider Electric InduSoft Web Studio before 7.1.3.5 Patch 5 and Wonderware InTouch Machine Edition through 7.1 SP3 Patch 4 use cleartext for project-window password storage, which allows local users to obtain sensitive information by reading a file.https://patchthecve.com/cve/CVE-2012-3005.htmlhttps://patchthecve.com/cve/CVE-2012-3005.htmlTue, 16 Jun 2026 23:42:30 +0000MEDIUM 6.9: Untrusted search path vulnerability in Invensys Wonderware InTouch 2012 and earlier, as used in Wonderware Application Server, Wonderware Information Server, Foxboro Control Software, InFusion CE/FE/SCADA, InBatch, and Wonderware Historian, allows local users to gain privileges via a Trojan horse DLhttps://patchthecve.com/cve/CVE-2012-3847.htmlhttps://patchthecve.com/cve/CVE-2012-3847.htmlTue, 16 Jun 2026 23:44:00 +0000MEDIUM 5.0: slssvc.exe in Invensys Wonderware SuiteLink in Invensys InTouch 2012 and Wonderware Application Server 2012 allows remote attackers to cause a denial of service (resource consumption) via a long Unicode string, a different vulnerability than CVE-2012-3007.https://patchthecve.com/cve/CVE-2012-0258.htmlhttps://patchthecve.com/cve/CVE-2012-0258.htmlTue, 16 Jun 2026 23:37:00 +0000MEDIUM 6.8: Heap-based buffer overflow in the WWCabFile ActiveX component in the Wonderware System Platform in Invensys Wonderware Application Server 2012 and earlier, Foxboro Control Software 3.1 and earlier, InFusion CE/FE/SCADA 2.5 and earlier, Wonderware Information Server 4.5 and earlier, ArchestrA Applicahttps://patchthecve.com/cve/CVE-2012-0257.htmlhttps://patchthecve.com/cve/CVE-2012-0257.htmlTue, 16 Jun 2026 23:36:59 +0000MEDIUM 6.8: Heap-based buffer overflow in the WWCabFile ActiveX component in the Wonderware System Platform in Invensys Wonderware Application Server 2012 and earlier, Foxboro Control Software 3.1 and earlier, InFusion CE/FE/SCADA 2.5 and earlier, Wonderware Information Server 4.5 and earlier, ArchestrA Applica