PT-2012-2420 · Ge Intelligent Platforms · Proficy Historian

Publicado 2012-03-15 · Atualizado 2018-01-04 · CVE-2012-0229

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GE Intelligent Platforms Proficy Historian versions 4.5 and earlier

Description The issue allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted session on TCP port 14000 to either ihDataArchiver.exe or ihDataArchiver x64.exe. This is related to the Data Archiver service and multiple opcode parsing remote code execution vulnerabilities.

Recommendations For versions 4.5 and earlier, consider restricting access to TCP port 14000 as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2012-0229

ZDI-12-133

Produtos afetados

Proficy Historian

Referências · 6

• http://secunia.com/advisories/48369 · Nota
• https://zerodayinitiative.com/advisories/ZDI-12-133 · Nota de Segurança
• http://securityfocus.com/bid/52437 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-0229 · Nota de Segurança
• http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB14767 · Aviso do Fabricante
• http://us-cert.gov/control_systems/pdf/ICSA-12-032-01.pdf · Nota