KLA10300 ACE vulnerability in GE IP products

A buffer overflow was found in GE IP products. By exploiting this vulnerability malicious users can execute arbitrary code and commands. This vulnerability can be exploited remotely via a specially designed input.

Original advisories

GE IP bulletin

Exploitation

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

Proficy-HMI-SCADA-iFIX

CVE list

CVE-2012-2515 critical

CVE-2012-2516 critical

Solution

Update to latest version

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• Proficy Historian versions 4.5, 4.0, 3.5, and 3.1Proficy HMI/SCADA – iFIX versions 5.1 and 5.0Proficy Pulse version 1.0Proficy Batch Execution version 5.6SI7 I/O Driver versions from 7.20 to 7.42