Details of VAR-201211-0176

ID

VAR-201211-0176

CVE

CVE-2012-3021

TITLE

GE Intelligent Platforms Proficy Real-Time Information Portal Service disruption in (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2012-005174

DESCRIPTION

rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through 3.5 SP1 allows remote attackers to cause a denial of service (memory corruption and service crash) or possibly execute arbitrary code via long input data, a different vulnerability than CVE-2012-3010 and CVE-2012-3026. GE Proficy Real-Time Information Portal is a Proficy real-time information portal, a real-time manufacturing intelligence application for GE Intelligent Platforms. Because the service fails to properly check the input data submitted by the user, the attacker is allowed to send malicious requests for denial of service attacks. Remote attackers may exploit this issue to crash the affected application, denying service to legitimate users. Due to the nature of this issue, arbitrary code execution may be possible; this has not been confirmed. ---------------------------------------------------------------------- The final version of the CSI 6.0 has been released. Find out why this is not just another Patch Management solution: http://secunia.com/blog/325/ ---------------------------------------------------------------------- TITLE: Proficy Real-Time Information Portal Multiple Vulnerabilities SECUNIA ADVISORY ID: SA50962 VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/50962/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=50962 RELEASE DATE: 2012-10-16 DISCUSS ADVISORY: http://secunia.com/advisories/50962/#comments AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s) http://secunia.com/advisories/50962/ ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS https://ca.secunia.com/?page=viewadvisory&vuln_id=50962 ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/ DESCRIPTION: Multiple vulnerabilities have been reported in Proficy Real-Time Information Portal, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system. The vulnerabilities are reported in version 2.6, 3.0, 3.0 SP1, 3.5, and 3.5 SP1. SOLUTION: Reportedly patches have been released. Contact the vendor for further information. PROVIDED AND/OR DISCOVERED BY: Kuang-Chun Hung, Information and Communication Security Technology Center (ICST). ORIGINAL ADVISORY: ICS-CERT: http://www.us-cert.gov/control_systems/pdf/ICSA-12-234-01.pdf OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ DEEP LINKS: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXPLOIT: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/advisories/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------

Trust: 2.79

sources: NVD: CVE-2012-3021 // JVNDB: JVNDB-2012-005174 // CNVD: CNVD-2012-5847 // BID: 55935 // IVD: 47098e0e-2353-11e6-abef-000c29c66e3d // VULMON: CVE-2012-3021 // PACKETSTORM: 117410

IOT TAXONOMY

category:

['ICS']

sub_category:

Trust: 0.8

sources: IVD: 47098e0e-2353-11e6-abef-000c29c66e3d // CNVD: CNVD-2012-5847

AFFECTED PRODUCTS

vendor:	ge	model:	intelligent platforms proficy real-time information portal	scope:	eq	version:	2.6	Trust: 1.6
vendor:	ge	model:	intelligent platforms proficy real-time information portal	scope:	eq	version:	3.0	Trust: 1.6
vendor:	ge	model:	intelligent platforms proficy real-time information portal	scope:	eq	version:	3.5	Trust: 1.6
vendor:	general electric	model:	proficy real-time information portal	scope:	eq	version:	2.6 to 3.5 sp1	Trust: 0.8
vendor:	ge fanuc automation	model:	proficy real-time information portal	scope:	eq	version:	2.6	Trust: 0.6
vendor:	ge fanuc automation	model:	proficy real-time information portal	scope:	eq	version:	3.0	Trust: 0.6
vendor:	ge fanuc automation	model:	proficy real-time information portal sp1	scope:	eq	version:	3.0	Trust: 0.6
vendor:	ge fanuc automation	model:	proficy real-time information portal	scope:	eq	version:	3.5	Trust: 0.6
vendor:	intelligent platforms proficy real time information portal	model:	-	scope:	eq	version:	3.0	Trust: 0.4
vendor:	intelligent platforms proficy real time information portal	model:	-	scope:	eq	version:	3.5	Trust: 0.4
vendor:	general	model:	electric proficy real-time information portal	scope:	eq	version:	3.5	Trust: 0.3
vendor:	general	model:	electric proficy real-time information portal sp1	scope:	eq	version:	3.0	Trust: 0.3
vendor:	general	model:	electric proficy real-time information portal	scope:	eq	version:	3.0	Trust: 0.3
vendor:	general	model:	electric proficy real-time information portal	scope:	eq	version:	2.6	Trust: 0.3
vendor:	intelligent platforms proficy real time information portal	model:	-	scope:	eq	version:	2.6	Trust: 0.2

sources: IVD: 47098e0e-2353-11e6-abef-000c29c66e3d // CNVD: CNVD-2012-5847 // BID: 55935 // JVNDB: JVNDB-2012-005174 // CNNVD: CNNVD-201210-385 // NVD: CVE-2012-3021

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2012-3021
value:	HIGH
Trust: 1.0
NVD:	CVE-2012-3021
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-201210-385
value:	CRITICAL
Trust: 0.6
IVD:	47098e0e-2353-11e6-abef-000c29c66e3d
value:	CRITICAL
Trust: 0.2
VULMON:	CVE-2012-3021
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2012-3021
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.9
IVD:	47098e0e-2353-11e6-abef-000c29c66e3d
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.9 [IVD]
Trust: 0.2

sources: IVD: 47098e0e-2353-11e6-abef-000c29c66e3d // VULMON: CVE-2012-3021 // JVNDB: JVNDB-2012-005174 // CNNVD: CNNVD-201210-385 // NVD: CVE-2012-3021

PROBLEMTYPE DATA

problemtype:

CWE-20

Trust: 1.8

sources: JVNDB: JVNDB-2012-005174 // NVD: CVE-2012-3021

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201210-385

TYPE

Input validation

Trust: 0.8

sources: IVD: 47098e0e-2353-11e6-abef-000c29c66e3d // CNNVD: CNNVD-201210-385

CONFIGURATIONS

sources: JVNDB: JVNDB-2012-005174

PATCH

title:	GEIP12-10	url:	http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB15050	Trust: 0.8
title:	Multiple vulnerabilities in Proficy Portal Remote Interface Service	url:	http://support.ge-ip.com/support/resources/sites/GE_FANUC_SUPPORT/content/live/KB/15000/KB15050/en_US/GEIP12-10%20Security%20Advisory%20-%20Proficy%20Portal%20rifsrvd.pdf	Trust: 0.8
title:	Patch for GE Proficy Real-Time Information Portal Denial of Service Vulnerability (CNVD-2012-5847)	url:	https://www.cnvd.org.cn/patchInfo/show/23757	Trust: 0.6

sources: CNVD: CNVD-2012-5847 // JVNDB: JVNDB-2012-005174

EXTERNAL IDS

db:	NVD	id:	CVE-2012-3021	Trust: 3.6
db:	ICS CERT	id:	ICSA-12-234-01	Trust: 2.6
db:	SECUNIA	id:	50962	Trust: 1.4
db:	BID	id:	55935	Trust: 1.4
db:	CNVD	id:	CNVD-2012-5847	Trust: 0.8
db:	CNNVD	id:	CNNVD-201210-385	Trust: 0.8
db:	JVNDB	id:	JVNDB-2012-005174	Trust: 0.8
db:	IVD	id:	47098E0E-2353-11E6-ABEF-000C29C66E3D	Trust: 0.2
db:	VULMON	id:	CVE-2012-3021	Trust: 0.1
db:	PACKETSTORM	id:	117410	Trust: 0.1

sources: IVD: 47098e0e-2353-11e6-abef-000c29c66e3d // CNVD: CNVD-2012-5847 // VULMON: CVE-2012-3021 // BID: 55935 // JVNDB: JVNDB-2012-005174 // PACKETSTORM: 117410 // CNNVD: CNNVD-201210-385 // NVD: CVE-2012-3021

REFERENCES

url:	http://www.us-cert.gov/control_systems/pdf/icsa-12-234-01.pdf	Trust: 2.6
url:	http://support.ge-ip.com/support/resources/sites/ge_fanuc_support/content/live/kb/15000/kb15050/en_us/geip12-10%20security%20advisory%20-%20proficy%20portal%20rifsrvd.pdf	Trust: 1.7
url:	http://support.ge-ip.com/support/index?page=kbchannel&id=s:kb15050	Trust: 1.7
url:	http://www.securityfocus.com/bid/55935	Trust: 1.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2012-3021	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2012-3021	Trust: 0.8
url:	http://secunia.com/advisories/50962/http	Trust: 0.6
url:	http://secunia.com/advisories/50962	Trust: 0.6
url:	http://www.ge-ip.com/products/2811	Trust: 0.3
url:	https://cwe.mitre.org/data/definitions/20.html	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1
url:	http://tools.cisco.com/security/center/viewalert.x?alertid=27198	Trust: 0.1
url:	https://ics-cert.us-cert.gov/advisories/icsa-12-234-01	Trust: 0.1
url:	http://secunia.com/vulnerability_intelligence/	Trust: 0.1
url:	http://secunia.com/advisories/secunia_security_advisories/	Trust: 0.1
url:	http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/	Trust: 0.1
url:	http://secunia.com/advisories/50962/#comments	Trust: 0.1
url:	https://ca.secunia.com/?page=viewadvisory&vuln_id=50962	Trust: 0.1
url:	http://secunia.com/advisories/50962/	Trust: 0.1
url:	http://secunia.com/vulnerability_scanning/personal/	Trust: 0.1
url:	http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org	Trust: 0.1
url:	http://secunia.com/blog/325/	Trust: 0.1
url:	http://secunia.com/advisories/about_secunia_advisories/	Trust: 0.1

sources: CNVD: CNVD-2012-5847 // VULMON: CVE-2012-3021 // BID: 55935 // JVNDB: JVNDB-2012-005174 // PACKETSTORM: 117410 // CNNVD: CNNVD-201210-385 // NVD: CVE-2012-3021

CREDITS

Kuang-Chun Hung of Information and Communication Security Technology Center

Trust: 0.3

sources: BID: 55935

SOURCES

db:	IVD	id:	47098e0e-2353-11e6-abef-000c29c66e3d
db:	CNVD	id:	CNVD-2012-5847
db:	VULMON	id:	CVE-2012-3021
db:	BID	id:	55935
db:	JVNDB	id:	JVNDB-2012-005174
db:	PACKETSTORM	id:	117410
db:	CNNVD	id:	CNNVD-201210-385
db:	NVD	id:	CVE-2012-3021

LAST UPDATE DATE

2025-04-11T23:08:48.510000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2012-5847	date:	2012-10-19T00:00:00
db:	VULMON	id:	CVE-2012-3021	date:	2013-04-13T00:00:00
db:	BID	id:	55935	date:	2012-10-15T00:00:00
db:	JVNDB	id:	JVNDB-2012-005174	date:	2012-11-02T00:00:00
db:	CNNVD	id:	CNNVD-201210-385	date:	2012-11-02T00:00:00
db:	NVD	id:	CVE-2012-3021	date:	2025-04-11T00:51:21.963

SOURCES RELEASE DATE

db:	IVD	id:	47098e0e-2353-11e6-abef-000c29c66e3d	date:	2012-10-19T00:00:00
db:	CNVD	id:	CNVD-2012-5847	date:	2012-10-19T00:00:00
db:	VULMON	id:	CVE-2012-3021	date:	2012-11-01T00:00:00
db:	BID	id:	55935	date:	2012-10-15T00:00:00
db:	JVNDB	id:	JVNDB-2012-005174	date:	2012-11-02T00:00:00
db:	PACKETSTORM	id:	117410	date:	2012-10-16T06:20:48
db:	CNNVD	id:	CNNVD-201210-385	date:	2012-10-18T00:00:00
db:	NVD	id:	CVE-2012-3021	date:	2012-11-01T10:44:45.420