GE iFix
view advisory published 2018-10-09
Successful exploitation of this vulnerability could cause a buffer overflow condition.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-17925US | medium4.8 | — | ||
Multiple instances of this vulnerability (Unsafe ActiveX Control Marked Safe For Scripting) have been identified in the third-party ActiveX object provided to GE iFIX versions 2.0… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (4)
- MitigationGigasoft components
GE recommends users only use ActiveX from trusted sources.
- MitigationiFIX
GE recommends users only use ActiveX from trusted sources.
- FixedGigasoft components
GE released iFIX 5.9 in June 2017 to address this issue by incorporating Gigasoft Version 8.0
- FixediFIX
GE released iFIX 5.9 in June 2017 to address this issue by incorporating Gigasoft Version 8.0
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan