CVE-2017-12732: Buffer Overflow
First published: Thu Oct 05 2017(Updated: )
A Stack-based Buffer Overflow issue was discovered in GE CIMPLICITY Versions 9.0 and prior. A function reads a packet to indicate the next packet length. The next packet length is not verified, allowing a buffer overwrite that could lead to an arbitrary remote code execution.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ge Intelligent Platforms Proficy Hmi\/scada Cimplicity | <=9.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- vendor/ge
- canonical/ge intelligent platforms proficy hmi\/scada cimplicity
- version/ge intelligent platforms proficy hmi\/scada cimplicity/9.0