CVE-2012-0231
highPriorität · verfolgen · 42EPSS 0.070 · 94. PerzentilEUUSEPSS · bewertet 2026-10-28
PRLicenseMgr.exe in the Proficy Server License Manager in GE Intelligent Platforms Proficy Plant Applications 5.0 and earlier allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted TCP session on port 12401.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.
- MitigationProficy Plant Applicationscisa_csaf_ot
GE Intelligent Platforms recommends that customers apply product updates to supported Proficy PlantApplications Versions 5.0 and 4.4.1. Proficy Plant Applications customers using unsupported Versions 4.3.1, 4.2.3, 4.2.2, and 215.8 should contact GE Intelligent Platforms Support for assistance with obtaining and applying a patch. GE Intelligent Platforms urges all customers to follow the recommendations in their security advisory.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · high–critical · 8.5–10
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (9)
Betroffene Produkte und Versionsbereiche.
- ge intelligent platforms proficy plant applications≤ 5.0nvdUScpe:2.3:a:ge:intelligent_platforms_proficy_plant_applications:*:*:*:*:*:*:*:*
- ge intelligent platforms proficy plant applications= 215.8nvdUScpe:2.3:a:ge:intelligent_platforms_proficy_plant_applications:*:*:*:*:*:*:*:*
- ge intelligent platforms proficy plant applications= 4.2.2nvdUScpe:2.3:a:ge:intelligent_platforms_proficy_plant_applications:*:*:*:*:*:*:*:*
- ge intelligent platforms proficy plant applications= 4.2.3nvdUScpe:2.3:a:ge:intelligent_platforms_proficy_plant_applications:*:*:*:*:*:*:*:*
- ge intelligent platforms proficy plant applications= 4.3.1nvdUScpe:2.3:a:ge:intelligent_platforms_proficy_plant_applications:*:*:*:*:*:*:*:*
- ge intelligent platforms proficy plant applications= 4.4.1nvdUScpe:2.3:a:ge:intelligent_platforms_proficy_plant_applications:*:*:*:*:*:*:*:*
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- ICSA-12-032-02GE Intelligent Platforms Proficy Plant Applications Memory Corruption Vulnerabilities2012-11-04icsa · cisa_csaf_otUS
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (14)
Externe Belege — Patches, Meldungen, Analysen.
- http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB14766cnnvd
- http://www.ge-ip.com/products/3311Patchcnnvd
- http://www.securityfocus.com/bid/52434cnnvd
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-032-02.pdfcnnvd
- http://secunia.com/advisories/48415enisa_euvd
- http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB14766enisa_euvd
- http://www.securityfocus.com/bid/52434enisa_euvd
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-032-02.pdfenisa_euvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan