EUVD-2019-8053

Malware in sbrugna...

CVE-2019-18243: Incorrect Permission Assignment for Critical Resource

HMI/SCADA iFIX Versions 6.1 and prior allows a local authenticated user to modify system-wide iFIX configurations through the registry. This may allow privilege escalation...

PT-2021-8998

Name of the Vulnerable Software and Affected Versions HMI/SCADA iFIX versions 6.1 and prior Description The issue allows a local authenticated user to modify system-wide iFIX configurations through the registry, which may lead to privilege escalation. Recommendations For HMI/SCADA iFIX versions 6...

CVE-2019-18255: Incorrect Permission Assignment for Critical Resource

HMI/SCADA iFIX Versions 6.1 and prior allows a local authenticated user to modify system-wide iFIX configurations through section objects. This may allow privilege escalation...

PT-2021-8999

Name of the Vulnerable Software and Affected Versions HMI/SCADA iFIX versions 6.1 and prior Description The issue allows a local authenticated user to modify system-wide iFIX configurations through section objects, potentially leading to privilege escalation. Recommendations For HMI/SCADA iFIX...

GE Digital HMI/SCADA iFIX

1. EXECUTIVE SUMMARY CVSS v3 6.1 ATTENTION: Low skill level to exploit Vendor: GE Digital Equipment: HMI/SCADA iFIX Vulnerabilities: Incorrect Permission Assignment for Critical Resource 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to escalate their...

Proficy HMI/SCADA Account Protection Weakness

The vulnerability of the GE Proficy HMI/SCADA iFIX control system, the client-server application for data processing and control operations, as well as the Proficy HMI/SCADA CIMPLICITY control system and the Proficy Historian repository, is related to insufficiently secure account protection...

CVE-2016-9360: Insufficiently Protected Credentials

An issue was discovered in General Electric GE Proficy HMI/SCADA iFIX Version 5.8 SIM 13 and prior versions, Proficy HMI/SCADA CIMPLICITY Version 9.0 and prior versions, and Proficy Historian Version 6.0 and prior versions. An attacker may be able to retrieve user passwords if he or she has acces...

PT-2015-3317

Name of the Vulnerable Software and Affected Versions General Electric GE Proficy HMI/SCADA iFIX versions 5.8 SIM 13 and prior General Electric GE Proficy HMI/SCADA CIMPLICITY versions 9.0 and prior General Electric GE Proficy Historian versions 6.0 and prior Description The issue allows an...

CVE-2012-2515

Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHelp Module aka the HTML Help component, as used in EMC Documentum ApplicationXtender Desktop 5.4; EMC Captiva Quickscan Pro 4.6 SP1; GE Intelligent Platforms Proficy Historian 3.1...

CVE-2012-2515

Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHelp Module aka the HTML Help component, as used in EMC Documentum ApplicationXtender Desktop 5.4; EMC Captiva Quickscan Pro 4.6 SP1; GE Intelligent Platforms Proficy Historian 3.1...

CVE-2012-2516

The CVE-2012-2516 issue is an ActiveX-based command-injection vulnerability in KeyHelp.ocx of GE Intelligent Platforms’ KeyWorks KeyHelp module, affecting Proficy Historian (3.1, 3.5, 4.0, 4.5), Proficy HMI/SCADA – iFIX (5.0, 5.1), Proficy Pulse 1.0, Proficy Batch Execution 5.6, and SI7 I/O Drive...

CVE-2012-2515

CVE-2012-2515 describes multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control (KeyHelp.ocx 1.2.312) in the KeyWorks KeyHelp Module (HTML Help component). The flaws allow remote code execution via a long string passed to the (1) JumpMappedID or (2) JumpURL methods, affecti...

PT-2012-4075

Name of the Vulnerable Software and Affected Versions GE Intelligent Platforms Proficy Historian versions 3.1 through 4.5 Proficy HMI/SCADA iFIX versions 5.0 through 5.1 Proficy Pulse version 1.0 Proficy Batch Execution version 5.6 SI7 I/O Driver versions 7.20 through 7.42 Description The issue...

KLA10300 ACE vulnerability in GE IP products

A buffer overflow was found in GE IP products. By exploiting this vulnerability malicious users can execute arbitrary code and commands. This vulnerability can be exploited remotely via a specially designed input. Original advisories GE IP bulletin Exploitation Public exploits exist for this...