CVE-2008-0174: Critical severity ge proficy real-time information portal vulnerability
GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier uses HTTP Basic Authentication, which transmits usernames and passwords in base64-encoded cleartext and allows remote attackers to steal the passwords and gain privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0174?
CVE-2008-0174 is considered a critical vulnerability due to its potential for remote exploitation and unauthorized access to sensitive information.
How do I fix CVE-2008-0174?
To mitigate CVE-2008-0174, update to a version of GE Fanuc Proficy Real-Time Information Portal later than 2.6 that does not rely on HTTP Basic Authentication.
What systems are affected by CVE-2008-0174?
CVE-2008-0174 affects all versions of GE Fanuc Proficy Real-Time Information Portal up to and including version 2.6.
What impact does CVE-2008-0174 have on users?
CVE-2008-0174 allows attackers to intercept usernames and passwords transmitted in cleartext, potentially leading to unauthorized access.
Is CVE-2008-0174 still a concern in modern systems?
While CVE-2008-0174 primarily affects older software versions, any system using legacy HTTP Basic Authentication is still at risk and should be reviewed.