ID
VAR-201612-0529
TITLE
Remote Denial of Service Vulnerability in GE Configuration Software iFIX V5.8
Trust: 0.6
DESCRIPTION
GE Proficy HMI / SCADA-iFIX configuration software is used for process visualization, data acquisition, analysis, and operation monitoring. The software uses the SCADA engine, has multiple connection options, and uses an open, highly scalable distributed network model. A remote denial of service vulnerability exists in the GE configuration software iFIX V5.8. Because the IFix configuration system fails to properly receive the input data of the Modbus PLC, a remote attacker can use this vulnerability to trigger the configuration system to stop working from a lower computer and launch a remote denial of service attack
Trust: 0.72
IOT TAXONOMY
| category: | ['ICS'] | sub_category: | - | Trust: 0.8 |
AFFECTED PRODUCTS
| vendor: | ge intellution | model: | ifix configuration system | scope: | eq | version: | 5.8 | Trust: 0.6 |
| vendor: | ge intellution the | model: | ifix configuration system | scope: | eq | version: | 5.8 | Trust: 0.2 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
TYPE
Denial of service
Trust: 0.2
PATCH
| title: | Remote Denial of Service Vulnerability in GE Configuration Software iFIX 5.8 | url: | https://www.cnvd.org.cn/patchinfo/show/84916 | Trust: 0.6 |
EXTERNAL IDS
| db: | CNVD | id: | CNVD-2016-11928 | Trust: 0.8 |
| db: | IVD | id: | 877A5540-D450-4D0F-B3EA-CFAB47A200CE | Trust: 0.2 |
SOURCES
| db: | IVD | id: | 877a5540-d450-4d0f-b3ea-cfab47a200ce |
| db: | CNVD | id: | CNVD-2016-11928 |
LAST UPDATE DATE
2022-05-17T01:36:34.269000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2016-11928 | date: | 2016-12-12T00:00:00 |
SOURCES RELEASE DATE
| db: | IVD | id: | 877a5540-d450-4d0f-b3ea-cfab47a200ce | date: | 2016-12-07T00:00:00 |
| db: | CNVD | id: | CNVD-2016-11928 | date: | 2017-01-13T00:00:00 |