Lucene search

K
cveCertccCVE-2011-1919
HistoryNov 02, 2011 - 5:55 p.m.

CVE-2011-1919

2011-11-0217:55:00
CWE-119
certcc
web.nvd.nist.gov
26
cve-2011-1919
buffer overflow
ge intelligent platforms
proficy applications
security vulnerability
remote attack
denial of service
arbitrary code
tcp traffic
nvd
cve

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.5

Confidence

High

EPSS

0.042

Percentile

92.4%

Multiple stack-based buffer overflows in GE Intelligent Platforms Proficy Applications before 4.4.1 SIM 101 and 5.x before 5.0 SIM 43 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted TCP message traffic to (1) PRProficyMgr.exe in Proficy Server Manager, (2) PRGateway.exe in Proficy Server Gateway, (3) PRRDS.exe in Proficy Remote Data Service, or (4) PRLicenseMgr.exe in Proficy Server License Manager.

Affected configurations

Nvd
Node
geintelligent_platforms_proficy_historianRange4.4.1
OR
geintelligent_platforms_proficy_historianMatch4.0
OR
geintelligent_platforms_proficy_historianMatch5.0
VendorProductVersionCPE
geintelligent_platforms_proficy_historian*cpe:2.3:a:ge:intelligent_platforms_proficy_historian:*:*:*:*:*:*:*:*
geintelligent_platforms_proficy_historian4.0cpe:2.3:a:ge:intelligent_platforms_proficy_historian:4.0:*:*:*:*:*:*:*
geintelligent_platforms_proficy_historian5.0cpe:2.3:a:ge:intelligent_platforms_proficy_historian:5.0:*:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.5

Confidence

High

EPSS

0.042

Percentile

92.4%

Related for CVE-2011-1919