CVE-2012-0229

Published Mar 15, 2012

Last updated 7 years ago

Overview

Description: The Data Archiver service in GE Intelligent Platforms Proficy Historian 4.5 and earlier allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted session on TCP port 14000 to (1) ihDataArchiver.exe or (2) ihDataArchiver_x64.exe.
Source: cret@cert.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 10
Impact score: 10
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov: CWE-119

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:ge:intelligent_platforms_proficy_historian:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BD7154F7-EB35-45EF-96E8-9C7046B6B6F3",
            "versionEndIncluding": "4.5"
          },
          {
            "criteria": "cpe:2.3:a:ge:intelligent_platforms_proficy_historian:1.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "19CF588D-73FE-458B-8612-D4CFCEEC00CE"
          },
          {
            "criteria": "cpe:2.3:a:ge:intelligent_platforms_proficy_historian:2.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "89EC63B5-5F9A-48CB-B609-593300867800"
          },
          {
            "criteria": "cpe:2.3:a:ge:intelligent_platforms_proficy_historian:2.0:beta:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8CA98EEF-CB31-4D5D-9168-D47E10C41FF8"
          },
          {
            "criteria": "cpe:2.3:a:ge:intelligent_platforms_proficy_historian:3.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "24392BA2-A311-4ED5-B724-E9D156FCDEAB"
          },
          {
            "criteria": "cpe:2.3:a:ge:intelligent_platforms_proficy_historian:3.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "612B7F05-3C6D-43CA-8D6C-F0A887789EF5"
          },
          {
            "criteria": "cpe:2.3:a:ge:intelligent_platforms_proficy_historian:3.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6D29C00B-B754-47C5-BBD0-D63DDD252DA6"
          },
          {
            "criteria": "cpe:2.3:a:ge:intelligent_platforms_proficy_historian:4.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6BC9F852-EA9A-497D-9ED2-DAF926D0440A"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References