Wonderware InBatch ActiveX Vulnerabilities

An attacker with network access to a system running Wonderware InBatch could remotely execute arbitrary code on the affected server or client, potentially allowing them to modify batch process parameters, alter production schedules, or disrupt manufacturing operations.

Manufacturing and batch process operators who rely on Wonderware InBatch for recipe management, batch execution, and production scheduling. This includes pharmaceutical, food and beverage, chemical processing, and other discrete manufacturing facilities that use AVEVA's batch execution platform.

An attacker could craft a malicious webpage or document containing a specially formatted ActiveX control parameter that triggers a stack buffer overflow when loaded by a user. The overflow allows arbitrary code execution with the privileges of the user running the browser or application. No authentication is required if the attacker can deliver the malicious content to a target user.