CVE-2008-0174

CRITICAL 9.8CVE-2008-0174 · Published 29/01/2008 · updated 16/06/2026

In short

CVE-2008-0174 is a CRITICAL (CVSS 9.8) vulnerability affecting proficy real-time information portal (ge).
Chance of exploitation in the next 30 days (EPSS): 2.0%, higher than 80.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
proficy real-time information portal ge	`≤ 2.6`	No fix yet

Description

GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier uses HTTP Basic Authentication, which transmits usernames and passwords in base64-encoded cleartext and allows remote attackers to steal the passwords and gain privileges.

References

securityreason.com/securityalert/3590 · Broken Link
securitytracker.com/id · Broken Link
support.gefanuc.com/support/index · Broken Link
kb.cert.org/vuls/id/180876 · Third Party Advisory
securityfocus.com/archive/1/487075/100/0/threaded · Broken Link
securityfocus.com/archive/1/487244/100/0/threaded · Broken Link
securityfocus.com/bid/30754 · Broken Link

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free