GE D20 TFTP Client Access Detection (SCADA)

Binary data 6271.prm...

Sensitive information can be obtained from the GE D20 Remote Terminal Unit via TFTP

Binary data scadatftpd20sensitivedata.nbin...

GE D20 Server TFTP File Transfer Detection (SCADA)

Binary data 6273.prm...

GE D20 Server TFTP File Transfer Detection (SCADA)

Binary data 6272.prm...

GE PLC telnet Server Detection (SCADA)

Binary data 6281.prm...

GE PLC telnet Server Default Account/Password (SCADA)

Binary data 6282.prm...

GE PLC telnet Server Default Account/Password (SCADA)

Binary data 6283.prm...

GE Proficy Historian ihDataArchiver.exe Trusted Header Size Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of GE Proficy Historian. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ihDataArchiver.exe process which listens by default on TCP port 14000. The co...

CVE-2011-3320

Cross-site scripting XSS vulnerability in the Web Administrator component in GE Intelligent Platforms Proficy Historian 4.x and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

CVE-2011-1918

Stack-based buffer overflow in the Data Archiver service in GE Intelligent Platforms Proficy Historian before 3.5 SIM 17 and 4.x before 4.0 SIM 12 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via crafted TCP message traffic...

CVE-2011-1919

Multiple stack-based buffer overflows in GE Intelligent Platforms Proficy Applications before 4.4.1 SIM 101 and 5.x before 5.0 SIM 43 allow remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via crafted TCP message traffic to 1 PRProficyMgr.exe in Profic...

Stack overflow

Multiple stack-based buffer overflows in GE Intelligent Platforms Proficy Applications before 4.4.1 SIM 101 and 5.x before 5.0 SIM 43 allow remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via crafted TCP message traffic to 1 PRProficyMgr.exe in Profic...

Stack overflow

Stack-based buffer overflow in the Data Archiver service in GE Intelligent Platforms Proficy Historian before 3.5 SIM 17 and 4.x before 4.0 SIM 12 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via crafted TCP message traffic...

CVE-2011-1918

Stack-based buffer overflow in the Data Archiver service in GE Intelligent Platforms Proficy Historian before 3.5 SIM 17 and 4.x before 4.0 SIM 12 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via crafted TCP message traffic...

CVE-2011-3320

CVE-2011-3320 concerns the Web Administrator component of GE Intelligent Platforms Proficy Historian (4.x and earlier). The vulnerability arises from lack of server-side validation of query string parameters, enabling an attacker to inject and execute arbitrary client-side scripts via specially c...

CVE-2011-1919

Multiple stack-based buffer overflows in GE Intelligent Platforms Proficy Applications before 4.4.1 SIM 101 and 5.x before 5.0 SIM 43 allow remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via crafted TCP message traffic to 1 PRProficyMgr.exe in Profic...

CVE-2011-1919

Vulnerability overview (CVE-2011-1919) : GE Intelligent Platforms Proficy Applications (pre-4.4.1 SIM 101 and pre-5.x before 5.0 SIM 43) contains a stack-based buffer overflow when processing crafted TCP messages. The affected components are Proficy Server Manager (PRProficyMgr.exe), Proficy Serv...

CVE-2011-1918

CVE-2011-1918 is a stack-based buffer overflow in the GE Intelligent Platforms Proficy Historian Data Archiver (ihDataArchiver.exe) that processes TCP/IP messages on port 14000. This remote vulnerability could crash the daemon or allow arbitrary code execution under the service account, affecting...

CVE-2011-3320

Cross-site scripting XSS vulnerability in the Web Administrator component in GE Intelligent Platforms Proficy Historian 4.x and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

GE Intelligent Platforms Proficy Plant Applications Buffer Overflow

Overview ICS CERT originally released Advisory ICSA-11-243-01P on the US-CERT secure Portal on August 31, 2011. This web page release was delayed to allow users time to download and install the update. ICS-CERT has received a report from GE concerning a stack-based buffer overflow vulnerability i...