First published: Thu Jul 05 2012(Updated: )
An ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module (aka the HTML Help component), as used in GE Intelligent Platforms Proficy Historian 3.1, 3.5, 4.0, and 4.5; Proficy HMI/SCADA iFIX 5.0 and 5.1; Proficy Pulse 1.0; Proficy Batch Execution 5.6; SI7 I/O Driver 7.20 through 7.42; and other products, allows remote attackers to execute arbitrary commands via crafted input, related to a "command injection vulnerability."
Credit: ics-cert@hq.dhs.gov
Affected Software | Affected Version | How to fix |
---|---|---|
GE Intelligent Platforms Proficy Batch Execution | =5.6 | |
GE Intelligent Platforms Proficy Historian | =3.1 | |
GE Intelligent Platforms Proficy Historian | =3.5 | |
GE Intelligent Platforms Proficy Historian | =4.0 | |
GE Intelligent Platforms Proficy Historian | =4.5 | |
Ge Intelligent Platforms Proficy Hmi\/scada Ifix | =5.0 | |
Ge Intelligent Platforms Proficy Hmi\/scada Ifix | =5.1 | |
GE Intelligent Platforms Proficy Pulse | =1.0 | |
Ge Intelligent Platforms Si7 I\/o Driver | =7.20 | |
Ge Intelligent Platforms Si7 I\/o Driver | =7.42 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.