« Volver al listado

CVE-2012-0230

Estado: ModificadaAlta (10)—

PRRDS.exe in the Proficy Remote Data Service in GE Intelligent Platforms Proficy Plant Applications 5.0 and earlier allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted TCP session on port 12299.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

GE — Intelligent Platforms Proficy Plant Applications

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-0230",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cret@cert.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-03-15T18:55:00.773",
  "references": [
    {
      "url": "http://secunia.com/advisories/48415",
      "source": "cret@cert.org"
    },
    {
      "url": "http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB14766",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/52434",
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-12-032-02.pdf",
      "tags": [
        "US Government Resource"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/73956",
      "source": "cret@cert.org"
    },
    {
      "url": "http://secunia.com/advisories/48415",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB14766",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/52434",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-12-032-02.pdf",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/73956",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "PRRDS.exe in the Proficy Remote Data Service in GE Intelligent Platforms Proficy Plant Applications 5.0 and earlier allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted TCP session on port 12299."
    },
    {
      "lang": "es",
      "value": "PRLicenseMgr.exe en Proficy Server License Manager en GE Intelligent Platforms Proficy Plant Applications v5.0 y anteriores permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria) o posiblemente ejecutar código a través de una sesión TCP manipulada en el puerto 12299."
    }
  ],
  "lastModified": "2026-06-16T23:36:57.193",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ge:intelligent_platforms_proficy_plant_applications:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E2F97ADD-79FF-4CB8-867B-24F09D36B2DD",
              "versionEndIncluding": "5.0"
            },
            {
              "criteria": "cpe:2.3:a:ge:intelligent_platforms_proficy_plant_applications:4.2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0C9D3849-A3A1-4B58-840B-45AADC11D30A"
            },
            {
              "criteria": "cpe:2.3:a:ge:intelligent_platforms_proficy_plant_applications:4.2.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "392DE944-9B69-49FA-A63F-D891EAF4DC92"
            },
            {
              "criteria": "cpe:2.3:a:ge:intelligent_platforms_proficy_plant_applications:4.3.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C1AE5419-B6CE-4834-9341-0CF330A09710"
            },
            {
              "criteria": "cpe:2.3:a:ge:intelligent_platforms_proficy_plant_applications:4.4.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F7B692C4-07B0-45D2-B4BA-9C6F15E277FB"
            },
            {
              "criteria": "cpe:2.3:a:ge:intelligent_platforms_proficy_plant_applications:215.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B405B6AE-1618-45B3-8DF4-3B1DDA0827F5"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cret@cert.org"
}