Sign-up

ID

VAR-201312-0502


TITLE

GE Proficy HMI/SCADA-iFIX 'TCPTASK.exe' Remote Denial of Service Vulnerability

Trust: 0.8

sources: IVD: 9f862b12-1efa-11e6-abef-000c29c66e3d // CNVD: CNVD-2013-14826

DESCRIPTION

GE Intelligent Platforms Proficy HMI/SCADA\342\200\223iFIX is the world's leading industrial automation software solution that provides process visualization, data acquisition and data monitoring for production operations. GE Proficy HMI/SCADA-iFIX 5.0, 5.1, 5.5 has a remote buffer overflow vulnerability in the implementation of the TCP/IP task process (TCPTASK.exe). A remote attacker exploits this vulnerability by sending a specially crafted TCP/IP message, which can result in a denial of service after successful exploitation

Trust: 0.72

sources: CNVD: CNVD-2013-14826 // IVD: 9f862b12-1efa-11e6-abef-000c29c66e3d

IOT TAXONOMY

category:['ICS']sub_category: -

Trust: 0.8

sources: IVD: 9f862b12-1efa-11e6-abef-000c29c66e3d // CNVD: CNVD-2013-14826

AFFECTED PRODUCTS

vendor:general electricmodel:proficy hmi/scada \342\200\223 ifixscope:eqversion:5.5

Trust: 0.6

vendor:general electricmodel:proficy hmi/scada \342\200\223 ifixscope:eqversion:5.1

Trust: 0.6

vendor:general electricmodel:proficy hmi/scada \342\200\223 ifixscope:eqversion:5.0

Trust: 0.6

vendor:general electricmodel:proficy hmi/scada – ifixscope:eqversion:5.5*

Trust: 0.2

vendor:general electricmodel:proficy hmi/scada – ifixscope:eqversion:5.1*

Trust: 0.2

vendor:general electricmodel:proficy hmi/scada – ifixscope:eqversion:5.0

Trust: 0.2

sources: IVD: 9f862b12-1efa-11e6-abef-000c29c66e3d // CNVD: CNVD-2013-14826

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2013-14826
value: MEDIUM

Trust: 0.6

IVD: 9f862b12-1efa-11e6-abef-000c29c66e3d
value: MEDIUM

Trust: 0.2

CNVD: CNVD-2013-14826
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

IVD: 9f862b12-1efa-11e6-abef-000c29c66e3d
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.9 [IVD]

Trust: 0.2

sources: IVD: 9f862b12-1efa-11e6-abef-000c29c66e3d // CNVD: CNVD-2013-14826

TYPE

Input validation

Trust: 0.2

sources: IVD: 9f862b12-1efa-11e6-abef-000c29c66e3d

PATCH

title:GE Proficy HMI/SCADA-iFIX 'TCPTASK.exe' Remote Denial of Service Vulnerability Patchurl:https://www.cnvd.org.cn/patchinfo/show/41398

Trust: 0.6

sources: CNVD: CNVD-2013-14826

EXTERNAL IDS

db:CNVDid:CNVD-2013-14826

Trust: 0.8

db:OSVDBid:100319

Trust: 0.6

db:BIDid:63949

Trust: 0.6

db:IVDid:9F862B12-1EFA-11E6-ABEF-000C29C66E3D

Trust: 0.2

sources: IVD: 9f862b12-1efa-11e6-abef-000c29c66e3d // CNVD: CNVD-2013-14826

REFERENCES

url:http://osvdb.org/100319

Trust: 0.6

sources: CNVD: CNVD-2013-14826

SOURCES

db:IVDid:9f862b12-1efa-11e6-abef-000c29c66e3d
db:CNVDid:CNVD-2013-14826

LAST UPDATE DATE

2022-05-17T01:57:49.580000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2013-14826date:2013-12-03T00:00:00

SOURCES RELEASE DATE

db:IVDid:9f862b12-1efa-11e6-abef-000c29c66e3ddate:2013-12-03T00:00:00
db:CNVDid:CNVD-2013-14826date:2013-12-03T00:00:00