CVE-2012-2516

Published: Jul 5, 2012Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

An ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module (aka the HTML Help component), as used in GE Intelligent Platforms Proficy Historian 3.1, 3.5, 4.0, and 4.5; Proficy HMI/SCADA iFIX 5.0 and 5.1; Proficy Pulse 1.0; Proficy Batch Execution 5.6; SI7 I/O Driver 7.20 through 7.42; and other products, allows remote attackers to execute arbitrary commands via crafted input, related to a "command injection vulnerability."

Affected (10)

Products: Ge: Intelligent Platforms Proficy Batch Execution, Intelligent Platforms Proficy Historian, Intelligent Platforms Proficy Hmi/scada Ifix, Intelligent Platforms Proficy Pulse, Intelligent Platforms Si7 I/o Driver

5 products

Intelligent Platforms Proficy Batch Execution

Intelligent Platforms Proficy Historian

Intelligent Platforms Proficy Hmi/scada Ifix

Intelligent Platforms Proficy Pulse

Intelligent Platforms Si7 I/o Driver

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Ge Intelligent Platforms Proficy Batch Execution	Version 5.6
Ge Intelligent Platforms Proficy Historian	Version 3.1
Ge Intelligent Platforms Proficy Historian	Version 3.5
Ge Intelligent Platforms Proficy Historian	Version 4.0
Ge Intelligent Platforms Proficy Historian	Version 4.5
Ge Intelligent Platforms Proficy Hmi/scada Ifix	Version 5.0
Ge Intelligent Platforms Proficy Hmi/scada Ifix	Version 5.1
Ge Intelligent Platforms Proficy Pulse	Version 1.0
Ge Intelligent Platforms Si7 I/o Driver	Version 7.20
Ge Intelligent Platforms Si7 I/o Driver	Version 7.42