First published: Thu Mar 15 2012(Updated: )
PRRDS.exe in the Proficy Remote Data Service in GE Intelligent Platforms Proficy Plant Applications 5.0 and earlier allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted TCP session on port 12299.
Credit: cret@cert.org
Affected Software | Affected Version | How to fix |
---|---|---|
GE Intelligent Platforms Proficy Plant Applications | <=5.0 | |
GE Intelligent Platforms Proficy Plant Applications | =4.2.2 | |
GE Intelligent Platforms Proficy Plant Applications | =4.2.3 | |
GE Intelligent Platforms Proficy Plant Applications | =4.3.1 | |
GE Intelligent Platforms Proficy Plant Applications | =4.4.1 | |
GE Intelligent Platforms Proficy Plant Applications | =215.8 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2012-0230 has a severity level that can lead to denial of service or potential arbitrary code execution.
To fix CVE-2012-0230, ensure that you update the Proficy Plant Applications to a version newer than 5.0.
CVE-2012-0230 affects GE Intelligent Platforms Proficy Plant Applications versions up to 5.0 and several earlier versions.
Yes, CVE-2012-0230 can be exploited remotely through a crafted TCP session on port 12299.
Exploiting CVE-2012-0230 may cause memory corruption and could allow attackers to execute arbitrary code.