CVE-2012-3021

Published: Nov 1, 2012Modified: Apr 29, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through 3.5 SP1 allows remote attackers to cause a denial of service (memory corruption and service crash) or possibly execute arbitrary code via long input data, a different vulnerability than CVE-2012-3010 and CVE-2012-3026.

Affected (5)

Products: Ge: Intelligent Platforms Proficy Real Time Information Portal

1 product

Intelligent Platforms Proficy Real Time Information Portal

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Ge Intelligent Platforms Proficy Real Time Information Portal	Version 2.6
Ge Intelligent Platforms Proficy Real Time Information Portal	Version 3.0
Ge Intelligent Platforms Proficy Real Time Information Portal	Version 3.0 sp1
Ge Intelligent Platforms Proficy Real Time Information Portal	Version 3.5
Ge Intelligent Platforms Proficy Real Time Information Portal	Version 3.5 sp1

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (8)

http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB15050

Source: ics-cert@hq.dhs.gov

Vendor Advisory

http://support.ge-ip.com/support/resources/sites/GE_FANUC_SUPPORT/content/live/KB/15000/KB15050/en_US/GEIP12-10%20Security%20Advisory%20-%20Proficy%20Portal%20rifsrvd.pdf

Source: ics-cert@hq.dhs.gov

Vendor Advisory

http://www.securityfocus.com/bid/55935

Source: ics-cert@hq.dhs.gov

http://www.us-cert.gov/control_systems/pdf/ICSA-12-234-01.pdf

Source: ics-cert@hq.dhs.gov

US Government Resource

http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB15050

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://support.ge-ip.com/support/resources/sites/GE_FANUC_SUPPORT/content/live/KB/15000/KB15050/en_US/GEIP12-10%20Security%20Advisory%20-%20Proficy%20Portal%20rifsrvd.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/55935

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.us-cert.gov/control_systems/pdf/ICSA-12-234-01.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

Timeline

No history available yet.