Improper input validation in Ge Intelligent Platforms Proficy Real-Time Information Portal
CVE-2012-3010
rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through 3.5 SP1 allows remote attackers to cause a denial of service (memory corruption and service crash) or possibly execute arbitrary code via long input data, a different vulnerability than CVE-2012-3021 and CVE-2012-3026.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.050 (91.4th percentile) — read the EPSS interpretation.
Affected products
- Ge Intelligent_platforms_proficy_real-time_information_portal — versions 2.6, 3.0, 3.5
- N/a — versions n/a
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (vdb-entry, x_refsource_BID)
- ics-cert@hq.dhs.gov (US Government Resource, x_refsource_MISC)
- ics-cert@hq.dhs.gov (x_refsource_CONFIRM, Vendor Advisory)
- ics-cert@hq.dhs.gov (x_refsource_CONFIRM, Vendor Advisory)