Details of VAR-201211-0175

ID

VAR-201211-0175

CVE

CVE-2012-3010

TITLE

GE Intelligent Platforms Proficy Real-Time Information Portal Service disruption in (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2012-005173

DESCRIPTION

rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through 3.5 SP1 allows remote attackers to cause a denial of service (memory corruption and service crash) or possibly execute arbitrary code via long input data, a different vulnerability than CVE-2012-3021 and CVE-2012-3026. GE Proficy Real-Time Information Portal is a Proficy real-time information portal, a real-time manufacturing intelligence application for GE Intelligent Platforms. Because the service fails to properly check the input data submitted by the user, the attacker is allowed to send malicious requests for denial of service attacks. Remote attackers may exploit this issue to crash the affected application, denying service to legitimate users. Due to the nature of this issue, arbitrary code execution may be possible; this has not been confirmed. ---------------------------------------------------------------------- The final version of the CSI 6.0 has been released. Find out why this is not just another Patch Management solution: http://secunia.com/blog/325/ ---------------------------------------------------------------------- TITLE: Proficy Real-Time Information Portal Multiple Vulnerabilities SECUNIA ADVISORY ID: SA50962 VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/50962/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=50962 RELEASE DATE: 2012-10-16 DISCUSS ADVISORY: http://secunia.com/advisories/50962/#comments AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s) http://secunia.com/advisories/50962/ ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS https://ca.secunia.com/?page=viewadvisory&vuln_id=50962 ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/ DESCRIPTION: Multiple vulnerabilities have been reported in Proficy Real-Time Information Portal, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system. The vulnerabilities are reported in version 2.6, 3.0, 3.0 SP1, 3.5, and 3.5 SP1. SOLUTION: Reportedly patches have been released. Contact the vendor for further information. PROVIDED AND/OR DISCOVERED BY: Kuang-Chun Hung, Information and Communication Security Technology Center (ICST). ORIGINAL ADVISORY: ICS-CERT: http://www.us-cert.gov/control_systems/pdf/ICSA-12-234-01.pdf OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ DEEP LINKS: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXPLOIT: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/advisories/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------

Trust: 2.7

sources: NVD: CVE-2012-3010 // JVNDB: JVNDB-2012-005173 // CNVD: CNVD-2012-5850 // BID: 55935 // IVD: 470f709e-2353-11e6-abef-000c29c66e3d // PACKETSTORM: 117410

IOT TAXONOMY

category:

['ICS']

sub_category:

Trust: 0.8

sources: IVD: 470f709e-2353-11e6-abef-000c29c66e3d // CNVD: CNVD-2012-5850

AFFECTED PRODUCTS

vendor:	ge	model:	intelligent platforms proficy real-time information portal	scope:	eq	version:	2.6	Trust: 1.6
vendor:	ge	model:	intelligent platforms proficy real-time information portal	scope:	eq	version:	3.5	Trust: 1.6
vendor:	ge	model:	intelligent platforms proficy real-time information portal	scope:	eq	version:	3.0	Trust: 1.6
vendor:	general electric	model:	proficy real-time information portal	scope:	eq	version:	2.6 to 3.5 sp1	Trust: 0.8
vendor:	ge fanuc automation	model:	proficy real-time information portal	scope:	eq	version:	2.6	Trust: 0.6
vendor:	ge fanuc automation	model:	proficy real-time information portal	scope:	eq	version:	3.0	Trust: 0.6
vendor:	ge fanuc automation	model:	proficy real-time information portal sp1	scope:	eq	version:	3.0	Trust: 0.6
vendor:	ge fanuc automation	model:	proficy real-time information portal	scope:	eq	version:	3.5	Trust: 0.6
vendor:	intelligent platforms proficy real time information portal	model:	-	scope:	eq	version:	3.0	Trust: 0.4
vendor:	intelligent platforms proficy real time information portal	model:	-	scope:	eq	version:	3.5	Trust: 0.4
vendor:	general	model:	electric proficy real-time information portal	scope:	eq	version:	3.5	Trust: 0.3
vendor:	general	model:	electric proficy real-time information portal sp1	scope:	eq	version:	3.0	Trust: 0.3
vendor:	general	model:	electric proficy real-time information portal	scope:	eq	version:	3.0	Trust: 0.3
vendor:	general	model:	electric proficy real-time information portal	scope:	eq	version:	2.6	Trust: 0.3
vendor:	intelligent platforms proficy real time information portal	model:	-	scope:	eq	version:	2.6	Trust: 0.2

sources: IVD: 470f709e-2353-11e6-abef-000c29c66e3d // CNVD: CNVD-2012-5850 // BID: 55935 // JVNDB: JVNDB-2012-005173 // CNNVD: CNNVD-201210-384 // NVD: CVE-2012-3010

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2012-3010
value:	HIGH
Trust: 1.0
NVD:	CVE-2012-3010
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-201210-384
value:	CRITICAL
Trust: 0.6
IVD:	470f709e-2353-11e6-abef-000c29c66e3d
value:	CRITICAL
Trust: 0.2

nvd@nist.gov:	CVE-2012-3010
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
IVD:	470f709e-2353-11e6-abef-000c29c66e3d
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.9 [IVD]
Trust: 0.2

sources: IVD: 470f709e-2353-11e6-abef-000c29c66e3d // JVNDB: JVNDB-2012-005173 // CNNVD: CNNVD-201210-384 // NVD: CVE-2012-3010

PROBLEMTYPE DATA

problemtype:

CWE-20

Trust: 1.8

sources: JVNDB: JVNDB-2012-005173 // NVD: CVE-2012-3010

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201210-384

TYPE

Input Validation Error

Trust: 0.9

sources: BID: 55935 // CNNVD: CNNVD-201210-384

CONFIGURATIONS

sources: JVNDB: JVNDB-2012-005173

PATCH

title:	GEIP12-10	url:	http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB15050	Trust: 0.8
title:	Multiple vulnerabilities in Proficy Portal Remote Interface Service	url:	http://support.ge-ip.com/support/resources/sites/GE_FANUC_SUPPORT/content/live/KB/15000/KB15050/en_US/GEIP12-10%20Security%20Advisory%20-%20Proficy%20Portal%20rifsrvd.pdf	Trust: 0.8
title:	Patch for GE Proficy Real-Time Information Portal Denial of Service Vulnerability (CNVD-2012-5850)	url:	https://www.cnvd.org.cn/patchInfo/show/23760	Trust: 0.6
title:	GE Proficy Real-Time Information Portal Enter the fix for the verification error vulnerability	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=123576	Trust: 0.6

sources: CNVD: CNVD-2012-5850 // JVNDB: JVNDB-2012-005173 // CNNVD: CNNVD-201210-384

EXTERNAL IDS

db:	NVD	id:	CVE-2012-3010	Trust: 3.5
db:	ICS CERT	id:	ICSA-12-234-01	Trust: 1.9
db:	BID	id:	55935	Trust: 1.3
db:	CNVD	id:	CNVD-2012-5850	Trust: 0.8
db:	CNNVD	id:	CNNVD-201210-384	Trust: 0.8
db:	SECUNIA	id:	50962	Trust: 0.8
db:	JVNDB	id:	JVNDB-2012-005173	Trust: 0.8
db:	NSFOCUS	id:	47141	Trust: 0.6
db:	IVD	id:	470F709E-2353-11E6-ABEF-000C29C66E3D	Trust: 0.2
db:	PACKETSTORM	id:	117410	Trust: 0.1

sources: IVD: 470f709e-2353-11e6-abef-000c29c66e3d // CNVD: CNVD-2012-5850 // BID: 55935 // JVNDB: JVNDB-2012-005173 // PACKETSTORM: 117410 // CNNVD: CNNVD-201210-384 // NVD: CVE-2012-3010

REFERENCES

url:	http://www.us-cert.gov/control_systems/pdf/icsa-12-234-01.pdf	Trust: 1.9
url:	http://www.securityfocus.com/bid/55935	Trust: 1.0
url:	http://support.ge-ip.com/support/index?page=kbchannel&id=s:kb15050	Trust: 1.0
url:	http://support.ge-ip.com/support/resources/sites/ge_fanuc_support/content/live/kb/15000/kb15050/en_us/geip12-10%20security%20advisory%20-%20proficy%20portal%20rifsrvd.pdf	Trust: 1.0
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2012-3010	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2012-3010	Trust: 0.8
url:	http://secunia.com/advisories/50962/http	Trust: 0.6
url:	http://www.nsfocus.net/vulndb/47141	Trust: 0.6
url:	http://www.ge-ip.com/products/2811	Trust: 0.3
url:	http://secunia.com/vulnerability_intelligence/	Trust: 0.1
url:	http://secunia.com/advisories/secunia_security_advisories/	Trust: 0.1
url:	http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/	Trust: 0.1
url:	http://secunia.com/advisories/50962/#comments	Trust: 0.1
url:	https://ca.secunia.com/?page=viewadvisory&vuln_id=50962	Trust: 0.1
url:	http://secunia.com/advisories/50962/	Trust: 0.1
url:	http://secunia.com/vulnerability_scanning/personal/	Trust: 0.1
url:	http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org	Trust: 0.1
url:	http://secunia.com/blog/325/	Trust: 0.1
url:	http://secunia.com/advisories/about_secunia_advisories/	Trust: 0.1

sources: CNVD: CNVD-2012-5850 // BID: 55935 // JVNDB: JVNDB-2012-005173 // PACKETSTORM: 117410 // CNNVD: CNNVD-201210-384 // NVD: CVE-2012-3010

CREDITS

Kuang-Chun Hung

Trust: 0.6

sources: CNNVD: CNNVD-201210-384

SOURCES

db:	IVD	id:	470f709e-2353-11e6-abef-000c29c66e3d
db:	CNVD	id:	CNVD-2012-5850
db:	BID	id:	55935
db:	JVNDB	id:	JVNDB-2012-005173
db:	PACKETSTORM	id:	117410
db:	CNNVD	id:	CNNVD-201210-384
db:	NVD	id:	CVE-2012-3010

LAST UPDATE DATE

2025-04-11T23:08:48.552000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2012-5850	date:	2012-10-19T00:00:00
db:	BID	id:	55935	date:	2012-10-15T00:00:00
db:	JVNDB	id:	JVNDB-2012-005173	date:	2012-11-02T00:00:00
db:	CNNVD	id:	CNNVD-201210-384	date:	2020-07-14T00:00:00
db:	NVD	id:	CVE-2012-3010	date:	2025-04-11T00:51:21.963

SOURCES RELEASE DATE

db:	IVD	id:	470f709e-2353-11e6-abef-000c29c66e3d	date:	2012-10-19T00:00:00
db:	CNVD	id:	CNVD-2012-5850	date:	2012-10-19T00:00:00
db:	BID	id:	55935	date:	2012-10-15T00:00:00
db:	JVNDB	id:	JVNDB-2012-005173	date:	2012-11-02T00:00:00
db:	PACKETSTORM	id:	117410	date:	2012-10-16T06:20:48
db:	CNNVD	id:	CNNVD-201210-384	date:	2012-10-18T00:00:00
db:	NVD	id:	CVE-2012-3010	date:	2012-11-01T10:44:45.327