CVE-2012-3026

CRITICAL 10.0CVE-2012-3026 · Published 01/11/2012 · updated 16/06/2026

In short

CVE-2012-3026 is a CRITICAL (CVSS 10.0) vulnerability affecting intelligent platforms proficy real-time information portal (ge).
Chance of exploitation in the next 30 days (EPSS): 5.0%, higher than 92.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
intelligent platforms proficy real-time information portal ge	`= 2.6= 3.0= 3.5`	No fix yet

Description

rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through 3.5 SP1 allows remote attackers to cause a denial of service (memory corruption and service crash) or possibly execute arbitrary code via long input data, a different vulnerability than CVE-2012-3010 and CVE-2012-3021.

References

support.ge-ip.com/support/index · Vendor Advisory
support.ge-ip.com/support/resources/sites/GE_FANUC_SUPPORT/content/live/KB/15000/KB15050/en_US/GEIP12-10%20Security%20Advisory%20-%20Proficy%20Portal%20rifsrvd.pdf · Vendor Advisory
securityfocus.com/bid/55935
us-cert.gov/control_systems/pdf/ICSA-12-234-01.pdf · US Government Resource

More vulnerabilities in intelligent platforms proficy real-time information portal

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

In short

CVE-2012-3026 is a CRITICAL (CVSS 10.0) vulnerability affecting intelligent platforms proficy real-time information portal (ge).

Chance of exploitation in the next 30 days (EPSS): 5.0%, higher than 92.2% of all vulnerabilities.

No patched version is listed yet: follow the vendor's advisory in References.

Package

Affected versions

Patched versions

intelligent platforms proficy real-time information portal

= 2.6= 3.0= 3.5

No fix yet

Description

More vulnerabilities in intelligent platforms proficy real-time information portal

See all →