Details of VAR-201211-0177

ID

VAR-201211-0177

CVE

CVE-2012-3026

TITLE

GE Intelligent Platforms Proficy Real-Time Information Portal Service disruption in (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2012-005175

DESCRIPTION

rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through 3.5 SP1 allows remote attackers to cause a denial of service (memory corruption and service crash) or possibly execute arbitrary code via long input data, a different vulnerability than CVE-2012-3010 and CVE-2012-3021. GE Proficy Real-Time Information Portal is a Proficy real-time information portal, a real-time manufacturing intelligence application for GE Intelligent Platforms. Because the service fails to properly check the input data submitted by the user, the attacker is allowed to send malicious requests for denial of service attacks. Remote attackers may exploit this issue to crash the affected application, denying service to legitimate users. Due to the nature of this issue, arbitrary code execution may be possible; this has not been confirmed. ---------------------------------------------------------------------- The final version of the CSI 6.0 has been released. Find out why this is not just another Patch Management solution: http://secunia.com/blog/325/ ---------------------------------------------------------------------- TITLE: Proficy Real-Time Information Portal Multiple Vulnerabilities SECUNIA ADVISORY ID: SA50962 VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/50962/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=50962 RELEASE DATE: 2012-10-16 DISCUSS ADVISORY: http://secunia.com/advisories/50962/#comments AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s) http://secunia.com/advisories/50962/ ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS https://ca.secunia.com/?page=viewadvisory&vuln_id=50962 ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/ DESCRIPTION: Multiple vulnerabilities have been reported in Proficy Real-Time Information Portal, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system. The vulnerabilities are reported in version 2.6, 3.0, 3.0 SP1, 3.5, and 3.5 SP1. SOLUTION: Reportedly patches have been released. Contact the vendor for further information. PROVIDED AND/OR DISCOVERED BY: Kuang-Chun Hung, Information and Communication Security Technology Center (ICST). ORIGINAL ADVISORY: ICS-CERT: http://www.us-cert.gov/control_systems/pdf/ICSA-12-234-01.pdf OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ DEEP LINKS: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXPLOIT: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/advisories/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------

Trust: 2.7

sources: NVD: CVE-2012-3026 // JVNDB: JVNDB-2012-005175 // CNVD: CNVD-2012-5848 // BID: 55935 // IVD: 470403da-2353-11e6-abef-000c29c66e3d // PACKETSTORM: 117410

IOT TAXONOMY

category:

['ICS']

sub_category:

Trust: 0.8

sources: IVD: 470403da-2353-11e6-abef-000c29c66e3d // CNVD: CNVD-2012-5848

AFFECTED PRODUCTS

vendor:	ge	model:	intelligent platforms proficy real-time information portal	scope:	eq	version:	2.6	Trust: 1.6
vendor:	ge	model:	intelligent platforms proficy real-time information portal	scope:	eq	version:	3.0	Trust: 1.6
vendor:	ge	model:	intelligent platforms proficy real-time information portal	scope:	eq	version:	3.5	Trust: 1.6
vendor:	general electric	model:	proficy real-time information portal	scope:	eq	version:	2.6 to 3.5 sp1	Trust: 0.8
vendor:	ge fanuc automation	model:	proficy real-time information portal	scope:	eq	version:	2.6	Trust: 0.6
vendor:	ge fanuc automation	model:	proficy real-time information portal	scope:	eq	version:	3.0	Trust: 0.6
vendor:	ge fanuc automation	model:	proficy real-time information portal sp1	scope:	eq	version:	3.0	Trust: 0.6
vendor:	ge fanuc automation	model:	proficy real-time information portal	scope:	eq	version:	3.5	Trust: 0.6
vendor:	intelligent platforms proficy real time information portal	model:	-	scope:	eq	version:	3.0	Trust: 0.4
vendor:	intelligent platforms proficy real time information portal	model:	-	scope:	eq	version:	3.5	Trust: 0.4
vendor:	general	model:	electric proficy real-time information portal	scope:	eq	version:	3.5	Trust: 0.3
vendor:	general	model:	electric proficy real-time information portal sp1	scope:	eq	version:	3.0	Trust: 0.3
vendor:	general	model:	electric proficy real-time information portal	scope:	eq	version:	3.0	Trust: 0.3
vendor:	general	model:	electric proficy real-time information portal	scope:	eq	version:	2.6	Trust: 0.3
vendor:	intelligent platforms proficy real time information portal	model:	-	scope:	eq	version:	2.6	Trust: 0.2

sources: IVD: 470403da-2353-11e6-abef-000c29c66e3d // CNVD: CNVD-2012-5848 // BID: 55935 // JVNDB: JVNDB-2012-005175 // CNNVD: CNNVD-201210-386 // NVD: CVE-2012-3026

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2012-3026
value:	HIGH
Trust: 1.0
NVD:	CVE-2012-3026
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-201210-386
value:	CRITICAL
Trust: 0.6
IVD:	470403da-2353-11e6-abef-000c29c66e3d
value:	CRITICAL
Trust: 0.2

nvd@nist.gov:	CVE-2012-3026
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
IVD:	470403da-2353-11e6-abef-000c29c66e3d
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.9 [IVD]
Trust: 0.2

sources: IVD: 470403da-2353-11e6-abef-000c29c66e3d // JVNDB: JVNDB-2012-005175 // CNNVD: CNNVD-201210-386 // NVD: CVE-2012-3026

PROBLEMTYPE DATA

problemtype:

CWE-20

Trust: 1.8

sources: JVNDB: JVNDB-2012-005175 // NVD: CVE-2012-3026

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201210-386

TYPE

Input validation

Trust: 0.8

sources: IVD: 470403da-2353-11e6-abef-000c29c66e3d // CNNVD: CNNVD-201210-386

CONFIGURATIONS

sources: JVNDB: JVNDB-2012-005175

PATCH

title:	GEIP12-10	url:	http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB15050	Trust: 0.8
title:	Multiple vulnerabilities in Proficy Portal Remote Interface Service	url:	http://support.ge-ip.com/support/resources/sites/GE_FANUC_SUPPORT/content/live/KB/15000/KB15050/en_US/GEIP12-10%20Security%20Advisory%20-%20Proficy%20Portal%20rifsrvd.pdf	Trust: 0.8
title:	Patch for GE Proficy Real-Time Information Portal Denial of Service Vulnerability (CNVD-2012-5848)	url:	https://www.cnvd.org.cn/patchInfo/show/23759	Trust: 0.6

sources: CNVD: CNVD-2012-5848 // JVNDB: JVNDB-2012-005175

EXTERNAL IDS

db:	NVD	id:	CVE-2012-3026	Trust: 3.5
db:	ICS CERT	id:	ICSA-12-234-01	Trust: 2.5
db:	SECUNIA	id:	50962	Trust: 1.4
db:	BID	id:	55935	Trust: 1.3
db:	CNVD	id:	CNVD-2012-5848	Trust: 0.8
db:	CNNVD	id:	CNNVD-201210-386	Trust: 0.8
db:	JVNDB	id:	JVNDB-2012-005175	Trust: 0.8
db:	IVD	id:	470403DA-2353-11E6-ABEF-000C29C66E3D	Trust: 0.2
db:	PACKETSTORM	id:	117410	Trust: 0.1

sources: IVD: 470403da-2353-11e6-abef-000c29c66e3d // CNVD: CNVD-2012-5848 // BID: 55935 // JVNDB: JVNDB-2012-005175 // PACKETSTORM: 117410 // CNNVD: CNNVD-201210-386 // NVD: CVE-2012-3026

REFERENCES

url:	http://www.us-cert.gov/control_systems/pdf/icsa-12-234-01.pdf	Trust: 2.5
url:	http://support.ge-ip.com/support/resources/sites/ge_fanuc_support/content/live/kb/15000/kb15050/en_us/geip12-10%20security%20advisory%20-%20proficy%20portal%20rifsrvd.pdf	Trust: 1.6
url:	http://support.ge-ip.com/support/index?page=kbchannel&id=s:kb15050	Trust: 1.6
url:	http://www.securityfocus.com/bid/55935	Trust: 1.0
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2012-3026	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2012-3026	Trust: 0.8
url:	http://secunia.com/advisories/50962/http	Trust: 0.6
url:	http://secunia.com/advisories/50962	Trust: 0.6
url:	http://www.ge-ip.com/products/2811	Trust: 0.3
url:	http://secunia.com/vulnerability_intelligence/	Trust: 0.1
url:	http://secunia.com/advisories/secunia_security_advisories/	Trust: 0.1
url:	http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/	Trust: 0.1
url:	http://secunia.com/advisories/50962/#comments	Trust: 0.1
url:	https://ca.secunia.com/?page=viewadvisory&vuln_id=50962	Trust: 0.1
url:	http://secunia.com/advisories/50962/	Trust: 0.1
url:	http://secunia.com/vulnerability_scanning/personal/	Trust: 0.1
url:	http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org	Trust: 0.1
url:	http://secunia.com/blog/325/	Trust: 0.1
url:	http://secunia.com/advisories/about_secunia_advisories/	Trust: 0.1

sources: CNVD: CNVD-2012-5848 // BID: 55935 // JVNDB: JVNDB-2012-005175 // PACKETSTORM: 117410 // CNNVD: CNNVD-201210-386 // NVD: CVE-2012-3026

CREDITS

Kuang-Chun Hung of Information and Communication Security Technology Center

Trust: 0.3

sources: BID: 55935

SOURCES

db:	IVD	id:	470403da-2353-11e6-abef-000c29c66e3d
db:	CNVD	id:	CNVD-2012-5848
db:	BID	id:	55935
db:	JVNDB	id:	JVNDB-2012-005175
db:	PACKETSTORM	id:	117410
db:	CNNVD	id:	CNNVD-201210-386
db:	NVD	id:	CVE-2012-3026

LAST UPDATE DATE

2025-04-11T23:08:48.591000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2012-5848	date:	2012-10-19T00:00:00
db:	BID	id:	55935	date:	2012-10-15T00:00:00
db:	JVNDB	id:	JVNDB-2012-005175	date:	2012-11-02T00:00:00
db:	CNNVD	id:	CNNVD-201210-386	date:	2012-11-05T00:00:00
db:	NVD	id:	CVE-2012-3026	date:	2025-04-11T00:51:21.963

SOURCES RELEASE DATE

db:	IVD	id:	470403da-2353-11e6-abef-000c29c66e3d	date:	2012-10-19T00:00:00
db:	CNVD	id:	CNVD-2012-5848	date:	2012-10-19T00:00:00
db:	BID	id:	55935	date:	2012-10-15T00:00:00
db:	JVNDB	id:	JVNDB-2012-005175	date:	2012-11-02T00:00:00
db:	PACKETSTORM	id:	117410	date:	2012-10-16T06:20:48
db:	CNNVD	id:	CNNVD-201210-386	date:	2012-10-18T00:00:00
db:	NVD	id:	CVE-2012-3026	date:	2012-11-01T10:44:45.497