1749 matches found
CVE-2012-0231
PRLicenseMgr.exe in the Proficy Server License Manager in GE Intelligent Platforms Proficy Plant Applications 5.0 and earlier allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted TCP session on port 12401...
CVE-2012-0232
Directory traversal vulnerability in rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6, 3.0, 3.0 SP1, and 3.5 allows remote attackers to modify the configuration via crafted strings...
CVE-2012-0231
CVE-2012-0231 affects GE Intelligent Platforms Proficy Plant Applications: PRLicenseMgr.exe (Proficy Server License Manager) memory corruption via crafted TCP session on port 12401/TCP, enabling remote denial of service or possible arbitrary code execution. ICS-CERT notes multiple memory corrupti...
CVE-2012-0229
The Data Archiver service in GE Intelligent Platforms Proficy Historian 4.5 and earlier allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted session on TCP port 14000 to 1 ihDataArchiver.exe or 2 ihDataArchiverx64.exe...
CVE-2012-0230
Affected software and component: GE Intelligent Platforms Proficy Plant Applications, specifically the Proficy Remote Data Service (PRRDS.exe) used by the suite, with default TCP port 12299. Root cause / vulnerability type: Memory corruption vulnerabilities in PRRDS.exe leading to potential remot...
PT-2012-2422
Name of the Vulnerable Software and Affected Versions GE Intelligent Platforms Proficy Plant Applications versions 5.0 and earlier Description The issue allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted TCP session on port 12401. This is due to ...
PT-2012-2421
Name of the Vulnerable Software and Affected Versions GE Intelligent Platforms Proficy Plant Applications versions 5.0 and earlier Description The issue allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted TCP session on port 12299. This is due to ...
CVE-2012-0232: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6, 3.0, 3.0 SP1, and 3.5 allows remote attackers to modify the configuration via crafted strings...
PT-2012-2420
Name of the Vulnerable Software and Affected Versions GE Intelligent Platforms Proficy Historian versions 4.5 and earlier Description The issue allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted session on TCP port 14000 to either...
CVE-2012-0229: Improper Restriction of Operations within the Bounds of a Memory Buffer
The Data Archiver service in GE Intelligent Platforms Proficy Historian 4.5 and earlier allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted session on TCP port 14000 to 1 ihDataArchiver.exe or 2 ihDataArchiverx64.exe...
PT-2012-2423
Name of the Vulnerable Software and Affected Versions GE Intelligent Platforms Proficy Real-Time Information Portal versions 2.6 through 3.5 Description The issue allows remote attackers to modify the configuration via crafted strings due to a directory traversal vulnerability in the Remote...
CVE-2012-0231: Improper Restriction of Operations within the Bounds of a Memory Buffer
PRLicenseMgr.exe in the Proficy Server License Manager in GE Intelligent Platforms Proficy Plant Applications 5.0 and earlier allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted TCP session on port 12401...
CVE-2012-1288
The CVE refers to UTC Fire & Security GE-MC100-NTP/GPS-ZB Master Clock devices that use hardcoded administrative credentials. The underlying issue is a hardcoded admin user/password that can be used to access the device via its web interface, enabling remote attackers to obtain access and potenti...
CVE-2012-1288: Undefined Security Weakness
The UTC Fire & Security GE-MC100-NTP/GPS-ZB Master Clock device uses hardcoded credentials for an administrative account, which makes it easier for remote attackers to obtain access via an HTTP session...
PT-2012-3176
Name of the Vulnerable Software and Affected Versions UTC Fire & Security GE-MC100-NTP/GPS-ZB Master Clock device affected versions not specified Description The issue concerns the use of hardcoded credentials for an administrative account in the device, making it easier for remote attackers to...
Boomge Search Cross Site Scripting
Exploit Title : boomge Search Cross Site Scripting Vulnerabilitiy Author : Emperor-Team Discovered By : Am!r Home : http://Emperor-Team.Org Software Link : http://www.boom.ge Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "boom ge" Expl0iTs ...
(Not) making the grade
The researchers working on Project Basecamp found significant security issues with programmable logic controller PLC they tested. Some PLCs were too brittle and insecure to even tolerate security scans and probing. The D20 ME PLC by General Electric – a widely deployed industrial system – fared t...
GE D20 Server TFTP File Transfer Detection (SCADA)
Binary data 6273.prm...