« Volver al listado

CVE-2012-0231

Estado: ModificadaAlta (10)—

PRLicenseMgr.exe in the Proficy Server License Manager in GE Intelligent Platforms Proficy Plant Applications 5.0 and earlier allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted TCP session on port 12401.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

GE — Intelligent Platforms Proficy Plant Applications

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-0231",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cret@cert.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-03-15T18:55:00.807",
  "references": [
    {
      "url": "http://secunia.com/advisories/48415",
      "source": "cret@cert.org"
    },
    {
      "url": "http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB14766",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/52434",
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-12-032-02.pdf",
      "tags": [
        "US Government Resource"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "http://xforce.iss.net/xforce/xfdb/73957",
      "source": "cret@cert.org"
    },
    {
      "url": "http://secunia.com/advisories/48415",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB14766",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/52434",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-12-032-02.pdf",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://xforce.iss.net/xforce/xfdb/73957",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "PRLicenseMgr.exe in the Proficy Server License Manager in GE Intelligent Platforms Proficy Plant Applications 5.0 and earlier allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted TCP session on port 12401."
    },
    {
      "lang": "es",
      "value": "PRLicenseMgr.exe en Proficy Server License Manager en GE Intelligent Platforms Proficy Plant Applications v5.0 y anteriores permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria) o posiblemente ejecutar código a través de una sesión TCP manipulada en el puerto 12401."
    }
  ],
  "lastModified": "2026-06-16T23:36:57.297",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ge:intelligent_platforms_proficy_plant_applications:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E2F97ADD-79FF-4CB8-867B-24F09D36B2DD",
              "versionEndIncluding": "5.0"
            },
            {
              "criteria": "cpe:2.3:a:ge:intelligent_platforms_proficy_plant_applications:4.2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0C9D3849-A3A1-4B58-840B-45AADC11D30A"
            },
            {
              "criteria": "cpe:2.3:a:ge:intelligent_platforms_proficy_plant_applications:4.2.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "392DE944-9B69-49FA-A63F-D891EAF4DC92"
            },
            {
              "criteria": "cpe:2.3:a:ge:intelligent_platforms_proficy_plant_applications:4.3.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C1AE5419-B6CE-4834-9341-0CF330A09710"
            },
            {
              "criteria": "cpe:2.3:a:ge:intelligent_platforms_proficy_plant_applications:4.4.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F7B692C4-07B0-45D2-B4BA-9C6F15E277FB"
            },
            {
              "criteria": "cpe:2.3:a:ge:intelligent_platforms_proficy_plant_applications:215.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B405B6AE-1618-45B3-8DF4-3B1DDA0827F5"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cret@cert.org"
}