CVE-2008-2005

no score yetEPSS 16%

The SuiteLink Service (aka slssvc.exe) in WonderWare SuiteLink before 2.0 Patch 01, as used in WonderWare InTouch 8.0, allows remote attackers to cause a denial of service (NULL pointer dereference and service shutdown) and possibly execute arbitrary code via a large length value in a Registration packet to TCP port 5413, which causes a memory allocation failure.

EPSS: 16% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
CWE: CWE-399
Published: 2008-05-06
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

wonderware:intouch
wonderware:suitelink

References

http://secunia.com/advisories/30063
http://www.coresecurity.com/?action=item&id=2187
http://www.kb.cert.org/vuls/id/596268
http://www.securityfocus.com/archive/1/491623/100/0/threaded
http://www.securityfocus.com/bid/28974

Check your stack JSON