Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2012-2516
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2012-2516

2022-10-0316:15:36
CWE-78
[email protected]
web.nvd.nist.gov
122
cve-2012-2516
activex control
keyworks keyhelp module
command injection vulnerability
ge intelligent platforms
proficy historian
proficy hmi/scada ifix
proficy pulse
proficy batch execution
si7 i/o driver

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.901 High

EPSS

Percentile

98.8%

JSON

An ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module (aka the HTML Help component), as used in GE Intelligent Platforms Proficy Historian 3.1, 3.5, 4.0, and 4.5; Proficy HMI/SCADA iFIX 5.0 and 5.1; Proficy Pulse 1.0; Proficy Batch Execution 5.6; SI7 I/O Driver 7.20 through 7.42; and other products, allows remote attackers to execute arbitrary commands via crafted input, related to a “command injection vulnerability.”

Affected configurations

NVD
Node
geintelligent_platforms_proficy_batch_executionMatch5.6
OR
geintelligent_platforms_proficy_historianMatch3.1
OR
geintelligent_platforms_proficy_historianMatch3.5
OR
geintelligent_platforms_proficy_historianMatch4.0
OR
geintelligent_platforms_proficy_historianMatch4.5
OR
geintelligent_platforms_proficy_hmi\/scada_ifixMatch5.0
OR
geintelligent_platforms_proficy_hmi\/scada_ifixMatch5.1
OR
geintelligent_platforms_proficy_pulseMatch1.0
OR
geintelligent_platforms_si7_i\/o_driverMatch7.20
OR
geintelligent_platforms_si7_i\/o_driverMatch7.42
CPENameOperatorVersion
ge:intelligent_platforms_proficy_batch_executionge intelligent platforms proficy batch executioneq5.6
ge:intelligent_platforms_proficy_historiange intelligent platforms proficy historianeq3.1
ge:intelligent_platforms_proficy_historiange intelligent platforms proficy historianeq3.5
ge:intelligent_platforms_proficy_historiange intelligent platforms proficy historianeq4.0
ge:intelligent_platforms_proficy_historiange intelligent platforms proficy historianeq4.5
ge:intelligent_platforms_proficy_hmi\/scada_ifixge intelligent platforms proficy hmi/scada ifixeq5.0
ge:intelligent_platforms_proficy_hmi\/scada_ifixge intelligent platforms proficy hmi/scada ifixeq5.1
ge:intelligent_platforms_proficy_pulsege intelligent platforms proficy pulseeq1.0
ge:intelligent_platforms_si7_i\/o_driverge intelligent platforms si7 i/o drivereq7.20
ge:intelligent_platforms_si7_i\/o_driverge intelligent platforms si7 i/o drivereq7.42

Related

zdi 1
saint 4
cvelist 1
packetstorm 1
seebug 1
checkpoint_advisories 1
metasploit 1
prion 1
nvd 1
exploitdb 1
ics 1
nessus 1
kaspersky 1
zdi
zdi
GE Proficy Historian KeyHelp ActiveX LaunchTriPane Remote Code Execution Vulnerability
2012-08-29 00:00:00
saint
saint
GE Proficy Historian KeyHelp ActiveX LaunchTriPane Vulnerability
2012-10-29 00:00:00
GE Proficy Historian KeyHelp ActiveX LaunchTriPane Vulnerability
2012-10-29 00:00:00
GE Proficy Historian KeyHelp ActiveX LaunchTriPane Vulnerability
2012-10-29 00:00:00
cvelist
cvelist
CVE-2012-2516
2022-10-03 16:15:36
packetstorm
packetstorm
KeyHelp ActiveX LaunchTriPane Remote Code Execution
2012-10-11 00:00:00
seebug
seebug
KeyHelp ActiveX LaunchTriPane Remote Code Execution Vulnerability
2014-07-01 00:00:00
checkpoint_advisories
checkpoint_advisories
GE Proficy Historian KeyHelp ActiveX LaunchTriPane Remote Code Execution (CVE-2012-2516)
2012-10-14 00:00:00
metasploit
metasploit
KeyHelp ActiveX LaunchTriPane Remote Code Execution Vulnerability
2012-10-10 17:14:54
prion
prion
Command injection
2012-07-05 03:23:00
nvd
nvd
CVE-2012-2516
2012-07-05 03:23:18
exploitdb
exploitdb
KeyHelp - ActiveX LaunchTriPane Remote Code Execution (Metasploit)
2012-10-11 00:00:00
ics
ics
GE Intelligent Platforms Proficy HTML Help Vulnerabilities (Update A)
2018-08-21 12:00:00
nessus
nessus
KeyWorks KeyHelp ActiveX Control Multiple Vulnerabilities
2012-09-26 00:00:00
kaspersky
kaspersky
KLA10300 ACE vulnerability in GE IP products
2012-07-04 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.901 High

EPSS

Percentile

98.8%

JSON
Related for CVE-2012-2516
zdi1saint4cvelist1packetstorm1seebug1checkpoint_advisories1metasploit1prion1nvd1exploitdb1ics1nessus1kaspersky1