CVE-2012-4689
mediumPriorität · verfolgen · 17EPSS 0.012 · 67. PerzentilEUUSEPSS · bewertet 2026-10-28
Integer overflow in CimWebServer.exe in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPLICITY, allows remote attackers to cause a denial of service (daemon crash) via a malformed HTTP request.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.
- MitigationProficy HMI/SCADA – CIMPLICITYcisa_csaf_ot
As with any third-party product, ensure that your IIS Web server is up to date with the latest security patches and follow any secure configuration recommendations from the vendor.
- MitigationProficy Process Systems with CIMPLICITYcisa_csaf_ot
As with any third-party product, ensure that your IIS Web server is up to date with the latest security patches and follow any secure configuration recommendations from the vendor.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · low–high · 3.7–7.1
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (10)
Betroffene Produkte und Versionsbereiche.
- ge intelligent platforms proficy hmi/scada cimplicity= 4.01nvdUScpe:2.3:a:ge:intelligent_platforms_proficy_hmi\/scada_cimplicity:*:*:*:*:*:*:*:*
- ge intelligent platforms proficy hmi/scada cimplicity= 7.5nvdUScpe:2.3:a:ge:intelligent_platforms_proficy_hmi\/scada_cimplicity:*:*:*:*:*:*:*:*
- ge intelligent platforms proficy hmi/scada cimplicity= 8.0nvdUScpe:2.3:a:ge:intelligent_platforms_proficy_hmi\/scada_cimplicity:*:*:*:*:*:*:*:*
- ge intelligent platforms proficy process systemsalle VersionennvdUScpe:2.3:h:ge:intelligent_platforms_proficy_process_systems:*:*:*:*:*:*:*:*
- ge intelligent platforms proficy process systems with cimplicityalle VersionennvdUScpe:2.3:a:ge:intelligent_platforms_proficy_process_systems_with_cimplicity:*:*:*:*:*:*:*:*
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- ICSA-12-341-01GE Proficy HMI/SCADA Cimplicity Integer Overflow2012-09-09icsa · cisa_csaf_otUS
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (9)
Externe Belege — Patches, Meldungen, Analysen.
- http://secunia.com/advisories/51789cnnvd
- http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB15153cnnvd
- http://www.ge-ip.com/Patchcnnvd
- http://www.securityfocus.com/bid/57188cnnvd
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-341-01.pdfcnnvd
- http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB15153enisa_euvd
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-341-01.pdfenisa_euvd
- http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB15153nvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan