CVE-2012-0232

2012-03-1518:55:00

CWE-22

[email protected]

web.nvd.nist.gov

102

cve-2012-0232

directory traversal

remote interface service

ge intelligent platforms

proficy real-time information portal

configuration modification

crafted strings

nvd

6.7 Medium

AI Score

Confidence

Low

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

0.1 Low

EPSS

Percentile

94.9%

JSON

Directory traversal vulnerability in rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6, 3.0, 3.0 SP1, and 3.5 allows remote attackers to modify the configuration via crafted strings.

CPENameOperatorVersion
ge:intelligent_platforms_proficy_real-time_information_portalge intelligent platforms proficy real-time information portaleq3.0
ge:intelligent_platforms_proficy_real-time_information_portalge intelligent platforms proficy real-time information portaleq2.6
ge:intelligent_platforms_proficy_real-time_information_portalge intelligent platforms proficy real-time information portaleq3.5

CPE	Name	Operator	Version
ge:intelligent_platforms_proficy_real-time_information_portal	ge intelligent platforms proficy real-time information portal	eq	3.0
ge:intelligent_platforms_proficy_real-time_information_portal	ge intelligent platforms proficy real-time information portal	eq	2.6
ge:intelligent_platforms_proficy_real-time_information_portal	ge intelligent platforms proficy real-time information portal	eq	3.5