Having sold more than 500,000 software licenses in over 100,000 plants worldwide, Wonderware has customers in virtually every global industry - including Oil & Gas, Food & Beverage, Utilities, Pharmaceuticals, Electronics, Metals, Automotive and more'. According to the company's website : 'one third of the world's plants run Wonderware software solutions. WonderWare is supplier of industrial automation and information software solutions. The Invensys security update patch is at the Wonderware download Web site.Title: Wonderware SuiteLink Denial of Service vulnerability Install DAServer Runtime Components Upgrade 3.0 SP2, 3.0 SP3 or higher for any DAServer, DI Object, or third-party DAServer installation.Upgrade to DASABCIP 4.1 SP2 or DASSiDirect 3.0.Upgrade to InTouch/Wonderware Application Server (IT 10.5, WAS 3.5) or later.Ěpply security update patch to affected nodes.Invensys recommended the following mitigations: CVE-2012-3007 is the number assigned to this vulnerability, which has a CVSS V2 base score of 7.1. This attack causes a crash of slssvc.exe and a DoS. In one of the vulnerabilities, attackers can send an oversized unallocated string into the SuiteLink buffer that causes the allocated stack buffer to be overwritten.

The Invensys Wonderware SuiteLink component is in many industries worldwide, including manufacturing, energy, food and beverage, chemical, and water and wastewater. Generally, when a user installs a Wonderware product, SuiteLink likely goes in as a common component. The Invensys Wonderware SuiteLink Service connects Wonderware software with third-party products and OPC-compliant devices and applications. It also can be a communication between Wonderware products and some third-party products developed with Wonderware’s Extensibility Tool Kits.

SuiteLink is a common component used for communication between Wonderware products. This exploit could affect critical infrastructure and key resources where Wonderware SuiteLink is in play. The flaw allows an attacker to remotely stall or crash the slssvc service by sending a long and unallocated Unicode string to the buffer. The vulnerability allows an attacker to cause a buffer overflow that can ultimately lead to a denial-of-service (DoS) and crash of the system in some versions.

Wonderware suspended suitelink updates