CVE-2012-3026

Intelligent Platforms Proficy Real-time Information Portal - Improper Input Validation

Title source: rule

Description

rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through 3.5 SP1 allows remote attackers to cause a denial of service (memory corruption and service crash) or possibly execute arbitrary code via long input data, a different vulnerability than CVE-2012-3010 and CVE-2012-3021.

References (4)

Core 4

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/55935

US Government Resource x_refsource_misc

http://www.us-cert.gov/control_systems/pdf/ICSA-12-234-01.pdf

Vendor Advisory x_refsource_confirm

http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB15050

Vendor Advisory x_refsource_confirm

http://support.ge-ip.com/support/resources/sites/GE_FANUC_SUPPORT/content/live/KB/15000/KB15050/en_US/GEIP12-10%20Security%20Advisory%20-%20Proficy%20Portal%20rifsrvd.pdf

Scores

EPSS 0.0501

EPSS Percentile 91.2%

Details

CWE

CWE-20

Status published

Products (3)

ge/intelligent_platforms_proficy_real-time_information_portal 2.6

ge/intelligent_platforms_proficy_real-time_information_portal 3.0 (2 CPE variants)

ge/intelligent_platforms_proficy_real-time_information_portal 3.5 (2 CPE variants)

Published Nov 01, 2012

Tracked Since Feb 18, 2026