GE Intelligent Platforms Proficy HTML Help Vulnerabilities

🗓️ 11 Feb 2012 07:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 46 Views

GE Intelligent Platforms Proficy HTML Help Vulnerabilities Update A. Stack-based Buffer Overflow, Command Injection affecting multiple products worldwide. Exploitable remotely with low skill level

Reporter	Title	Published	Views	Family All 27
0day.today	KeyHelp ActiveX LaunchTriPane Remote Code Execution	11 Oct 201200:00	–	zdt
Circl	CVE-2012-2515	29 May 201815:50	–	circl
Circl	CVE-2012-2516	11 Oct 201200:00	–	circl
Check Point Advisories	Multiple Vendors KeyHelp ActiveX Control Buffer Overflow (CVE-2012-2515)	1 Feb 201000:00	–	checkpoint_advisories
Check Point Advisories	GE Proficy Historian KeyHelp ActiveX LaunchTriPane Remote Code Execution (CVE-2012-2516)	14 Oct 201200:00	–	checkpoint_advisories
CVE	CVE-2012-2515	5 Jul 201201:00	–	cve
CVE	CVE-2012-2516	5 Jul 201201:00	–	cve
Cvelist	CVE-2012-2515	5 Jul 201201:00	–	cvelist
Cvelist	CVE-2012-2516	5 Jul 201201:00	–	cvelist
Exploit DB	KeyHelp - ActiveX LaunchTriPane Remote Code Execution (Metasploit)	11 Oct 201200:00	–	exploitdb

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2012/icsa-12-131-02.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-12-131-02
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
cisa	www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
cisa	www.cisa.gov/uscert/ncas/tips/ST04-014

11 Feb 2012 07:00Current

7.8High risk

Vulners AI Score7.8

CVSS 29.3

EPSS0.69414