CVE-2012-3005

CVE-2012-3005 is an untrusted search path vulnerability affecting multiple Invensys Wonderware products, including InTouch 2012 and earlier, Application Server, Information Server, and others. This flaw allows a local attacker to gain elevated privileges by introducing a malicious DLL into an unspecified directory. With a CVSS score of 6.9, it is considered a high-severity vulnerability due to its local attack vector, medium complexity, and complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage surrounding this CVE.