Ge vulnerabilities, page 5

127 vulnerabilities

Known vulnerabilities in Ge products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 143 products.

9.8CriticalCVE-2022-24116ge · inet_900_firmware +7 morege inet_900_firmwareCertain General Electric Renewable Energy products have inadequate encryption strength. This affects iNET and iNET II before 8.3.0.EPSS0.30%9.8CriticalCVE-2022-24119ge · inet_900_firmware +7 morege inet_900_firmwareCertain General Electric Renewable Energy products have a hidden feature for unauthenticated remote access to the device configuration shell. This affects iNET and iNET II before 8.3.0.EPSS0.74%9.8CriticalCVE-2022-24117ge · inet_900_firmware +7 morege inet_900_firmwareCertain General Electric Renewable Energy products download firmware without an integrity check. This affects iNET and iNET II before 8.3.0, SD before 6.4.7, TD220X before 2.0.16, and TD220MAX before 1.2.6.EPSS0.36%7.8HighCVE-2022-3084ge · cimplicityGE CIMPLICITY Access of Uninitialized PointerGE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiRootOptionTable, which could allow an attacker to execute arbitrary code.EPSS0.24%7.8HighCVE-2022-3092ge · cimplicityGE CIMPLICITY Out-of-bounds WriteGE CIMPICITY versions 2022 and prior is vulnerable to an out-of-bounds write, which could allow an attacker to execute arbitrary code.EPSS0.24%7.8HighCVE-2022-23921ge · proficy_cimplicitiy +1 moreICSA-22-053-01 GE Proficy CIMPLICITY-IPMExploitation of this vulnerability may result in local privilege escalation and code execution. GE maintains exploitation of this vulnerability is only possible if the attacker has login access to a machine actively running CIMPLICITY, the CIMPLICITY server is not already running a project, and the server is licensed for multiple projects.EPSS0.21%9.3CriticalCVE-2012-2515emc · captiva_quickscan_pro +6 moreemc captiva_quickscan_proMultiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHelp Module (aka the HTML Help component), as used in EMC Documentum ApplicationXtender Desktop 5.4; EMC Captiva Quickscan Pro 4.6 SP1; GE Intelligent Platforms Proficy Historian 3.1, 3.5, 4.0, and 4.5; GE Intelligent Platforms Proficy HMI/SCADA iFIX 5.0 and 5.1; GE Intelligent Platforms Proficy Pulse 1.0; GE Intelligent Platforms Proficy Batch Execution 5.6; GE Intelligent Platforms SI7 I/O Driver 7.20 through 7.42; and other products, allow remote attackers to execute arbitrary code via a long string in the second argument to the (1) JumpMappedID or (2) JumpURL method.EPSS27.59%9.3CriticalCVE-2012-2516ge · intelligent_platforms_proficy_batch_execution +4 morege intelligent_platforms_proficy_batch_executionAn ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module (aka the HTML Help component), as used in GE Intelligent Platforms Proficy Historian 3.1, 3.5, 4.0, and 4.5; Proficy HMI/SCADA iFIX 5.0 and 5.1; Proficy Pulse 1.0; Proficy Batch Execution 5.6; SI7 I/O Driver 7.20 through 7.42; and other products, allows remote attackers to execute arbitrary commands via crafted input, related to a "command injection vulnerability."EPSS39.71%6.4MediumCVE-2012-0232ge · intelligent_platforms_proficy_real-time_information_portalge intelligent_platforms_proficy_real-time_information_portalDirectory traversal vulnerability in rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6, 3.0, 3.0 SP1, and 3.5 allows remote attackers to modify the configuration via crafted strings.EPSS2.21%10CriticalCVE-2012-0231ge · intelligent_platforms_proficy_plant_applicationsge intelligent_platforms_proficy_plant_applicationsPRLicenseMgr.exe in the Proficy Server License Manager in GE Intelligent Platforms Proficy Plant Applications 5.0 and earlier allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted TCP session on port 12401.EPSS6.96%10CriticalCVE-2012-0230ge · intelligent_platforms_proficy_plant_applicationsge intelligent_platforms_proficy_plant_applicationsPRRDS.exe in the Proficy Remote Data Service in GE Intelligent Platforms Proficy Plant Applications 5.0 and earlier allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted TCP session on port 12299.EPSS9.16%10CriticalCVE-2012-0229ge · intelligent_platforms_proficy_historiange intelligent_platforms_proficy_historianThe Data Archiver service in GE Intelligent Platforms Proficy Historian 4.5 and earlier allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted session on TCP port 14000 to (1) ihDataArchiver.exe or (2) ihDataArchiver_x64.exe.EPSS4.95%4.3MediumCVE-2012-4689ge · intelligent_platforms_proficy_hmi\/scada_cimplicity +2 morege intelligent_platforms_proficy_hmi\/scada_cimplicityInteger overflow in CimWebServer.exe in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPLICITY, allows remote attackers to cause a denial of service (daemon crash) via a malformed HTTP request.EPSS1.15%7.5HighCVE-2012-6663ge · d200_firmware +1 morege d200_firmwareGeneral Electric D20ME devices are not properly configured and reveal plaintext passwords.EPSS9.49%10CriticalCVE-2012-3026ge · intelligent_platforms_proficy_real-time_information_portalge intelligent_platforms_proficy_real-time_information_portalrifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through 3.5 SP1 allows remote attackers to cause a denial of service (memory corruption and service crash) or possibly execute arbitrary code via long input data, a different vulnerability than CVE-2012-3010 and CVE-2012-3021.EPSS5.01%10CriticalCVE-2012-3021ge · intelligent_platforms_proficy_real-time_information_portalge intelligent_platforms_proficy_real-time_information_portalrifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through 3.5 SP1 allows remote attackers to cause a denial of service (memory corruption and service crash) or possibly execute arbitrary code via long input data, a different vulnerability than CVE-2012-3010 and CVE-2012-3026.EPSS5.01%10CriticalCVE-2012-3010ge · intelligent_platforms_proficy_real-time_information_portalge intelligent_platforms_proficy_real-time_information_portalrifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through 3.5 SP1 allows remote attackers to cause a denial of service (memory corruption and service crash) or possibly execute arbitrary code via long input data, a different vulnerability than CVE-2012-3021 and CVE-2012-3026.EPSS5.01%10CriticalCVE-2011-1919ge · intelligent_platforms_proficy_historiange intelligent_platforms_proficy_historianMultiple stack-based buffer overflows in GE Intelligent Platforms Proficy Applications before 4.4.1 SIM 101 and 5.x before 5.0 SIM 43 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted TCP message traffic to (1) PRProficyMgr.exe in Proficy Server Manager, (2) PRGateway.exe in Proficy Server Gateway, (3) PRRDS.exe in Proficy Remote Data Service, or (4) PRLicenseMgr.exe in Proficy Server License Manager.EPSS4.60%10CriticalCVE-2011-1918ge · intelligent_platforms_proficy_historiange intelligent_platforms_proficy_historianStack-based buffer overflow in the Data Archiver service in GE Intelligent Platforms Proficy Historian before 3.5 SIM 17 and 4.x before 4.0 SIM 12 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted TCP message traffic.EPSS6.29%4.3MediumCVE-2011-3320ge · intelligent_platforms_proficy_historiange intelligent_platforms_proficy_historianCross-site scripting (XSS) vulnerability in the Web Administrator component in GE Intelligent Platforms Proficy Historian 4.x and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.EPSS0.91%