Invensys Wonderware InTouch Improper Input Validation Vulnerability
Low RiskICS-CERT ICSA-13-276-01Jul 6, 2013
Summary
Invensys Wonderware InTouch HMI versions 2012_R2 and earlier contain an improper input validation vulnerability (CWE-20) that could allow an attacker with access to the HMI workstation to inject malicious input and execute code. InTouch is a widely deployed SCADA/HMI system used for monitoring and controlling industrial processes. No vendor patch is available for this issue.
What this means
What could happen
An attacker who gains access to an InTouch HMI workstation could inject malicious input through the application's user interface to execute arbitrary code or alter process control logic, potentially disrupting manufacturing operations or damaging equipment.
Who's at risk
Manufacturing facilities using Invensys/AVEVA InTouch HMI systems version 2012_R2 or earlier should be concerned. This includes operators and engineers who rely on InTouch for supervisory control, data acquisition, and process visualization in discrete and batch manufacturing environments.
How it could be exploited
An attacker with network access to the InTouch HMI system would craft malicious input (such as specially formatted data in configuration files, command parameters, or user-facing input fields) that bypasses input validation. This could result in code execution on the engineering or operator workstation, which may have access to underlying PLCs and process control devices.
Prerequisites
- Network access to the InTouch HMI system
- Ability to interact with InTouch application input fields or configuration
- Running InTouch version 2012_R2 or earlier
no patch availableaffects supervisory control systems
Exploitability
Low exploit probability (EPSS 0.1%)
Affected products (1)
ProductAffected VersionsFix Status
InTouch HMI: <=2012_R2≤ 2012 R2No fix (EOL)
Remediation & Mitigation
0/4
Do now
0/2HARDENINGApply host-based firewalls to limit inbound connections to InTouch HMI systems to necessary ports and protocols
WORKAROUNDImplement input validation and sanitization at the application level where possible through configuration or plugins
Schedule — requires maintenance window
0/1Patching may require device reboot — plan for process interruption
HOTFIXUpgrade InTouch HMI to a version newer than 2012_R2 if available from vendor
Mitigations - no patch available
0/1InTouch HMI: <=2012_R2 has reached End of Life. The vendor will not release a patch. Apply the following compensating controls:
HARDENINGImplement network segmentation to restrict access to InTouch HMI workstations to authorized engineering and operator personnel only
CVEs (1)
↑↓ Navigate · Esc Close
API:
/api/v1/advisories/be0586ad-0be2-44e6-947c-b36282d3cdf2