CVE-2008-0174

GE Fanuc Proficy Real-Time Information Portal (2.6 and earlier) uses HTTP Basic Authentication, transmitting usernames in cleartext and passwords in Base64, enabling credential theft and potential privilege gain via network interception. Affects Proficy Information Portal up to version 2.6. Remed...

C4 Security Advisory - GE Fanuc Proficy Information Portal 2.6 Authentication Vulnerability

Background ----------------- GE-Fanuc's Proficy Information Portal 2.6 is a web based reporting application for the SCADA environment. As such it will usually be installed in a buffer zone between the SCADA and the corporate network, which makes it a very sensitive application as it can access bo...