ID
VAR-201809-1223
TITLE
GE iFix workspace.exe component has DLL hijacking vulnerability
Trust: 0.6
sources:
CNVD: CNVD-2018-19136
DESCRIPTION
GE Intelligent Platform (GE-IP) 's iFIX is the world's leading industrial automation software solution that provides process visualization, data acquisition, and data monitoring of production operations. There is a DLL hijacking vulnerability in the GE iFix workspace.exe component. An attacker can use the vulnerability to execute malicious code by loading a malicious dll named "DWMAPI.dll"
Trust: 0.72
sources:
CNVD: CNVD-2018-19136 //
IVD: e2fb6d72-39ab-11e9-9b13-000c29342cb1
IOT TAXONOMY
| category: | ['ICS'] | sub_category: | - | Trust: 0.8 |
sources:
IVD: e2fb6d72-39ab-11e9-9b13-000c29342cb1 //
CNVD: CNVD-2018-19136
AFFECTED PRODUCTS
| vendor: | ge | model: | ifix | scope: | eq | version: | 5.5 | Trust: 0.8 |
sources:
IVD: e2fb6d72-39ab-11e9-9b13-000c29342cb1 //
CNVD: CNVD-2018-19136
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
sources:
IVD: e2fb6d72-39ab-11e9-9b13-000c29342cb1 //
CNVD: CNVD-2018-19136
TYPE
Code injection
Trust: 0.2
sources:
IVD: e2fb6d72-39ab-11e9-9b13-000c29342cb1
EXTERNAL IDS
| db: | CNVD | id: | CNVD-2018-19136 | Trust: 0.8 |
| db: | IVD | id: | E2FB6D72-39AB-11E9-9B13-000C29342CB1 | Trust: 0.2 |
sources:
IVD: e2fb6d72-39ab-11e9-9b13-000c29342cb1 //
CNVD: CNVD-2018-19136
SOURCES
| db: | IVD | id: | e2fb6d72-39ab-11e9-9b13-000c29342cb1 |
| db: | CNVD | id: | CNVD-2018-19136 |
LAST UPDATE DATE
2022-05-17T01:40:59.483000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2018-19136 | date: | 2018-09-19T00:00:00 |
SOURCES RELEASE DATE
| db: | IVD | id: | e2fb6d72-39ab-11e9-9b13-000c29342cb1 | date: | 2018-09-18T00:00:00 |
| db: | CNVD | id: | CNVD-2018-19136 | date: | 2018-10-01T00:00:00 |