GE Proficy Real-Time Information Portal Multiple Denial of Service Vulnerabilities

Bugtraq ID:	55935
Class:	Input Validation Error
CVE:	CVE-2012-3010 CVE-2012-3021 CVE-2012-3026
Remote:	Yes
Local:	No
Published:	Oct 15 2012 12:00AM
Updated:	Oct 15 2012 12:00AM
Credit:	Kuang-Chun Hung of Information and Communication Security Technology Center
Vulnerable:	General Electric Proficy Real-Time Information Portal 3.5 General Electric Proficy Real-Time Information Portal 3.0 SP1 General Electric Proficy Real-Time Information Portal 3.0 General Electric Proficy Real-Time Information Portal 2.6
Not Vulnerable:

GE Proficy Real-Time Information Portal Multiple Denial of Service Vulnerabilities

GE Proficy Real-Time Information Portal is prone to multiple denial-of-service vulnerabilities.

Remote attackers may exploit this issue to crash the affected application, denying service to legitimate users. Due to the nature of this issue, arbitrary code execution may be possible; this has not been confirmed.

GE Proficy Real-Time Information Portal versions 3.0, 3.0 SP1, 3.5, 3.5 SP1 and 2.6 are vulnerable.

GE Proficy Real-Time Information Portal Multiple Denial of Service Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

GE Proficy Real-Time Information Portal Multiple Denial of Service Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

GE Proficy Real-Time Information Portal Multiple Denial of Service Vulnerabilities

References:

• Proficy Real-Time Information Portal Homepage (General Electric )