Back to feed
EUVD-2012-2502 · Published Jul 5, 2012
An ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module (aka the HTML Help component), as used in GE Intelligent Platforms Proficy Historian 3.1, 3.5, 4.0, and 4.5; Proficy HMI/SCADA iFIX 5.0 and 5.1; Proficy Pulse 1.0; Proficy Batch Execution 5.6; SI7 I/O Driver 7.20 through 7.42; and other products, allows remote attackers to execute arbitrary commands via crafted input, related to a "command injection vulnerability."
Technologies
Ge Intelligent Platforms Proficy Hmi\/Scada IfixGe Intelligent Platforms Si7 I\/O DriverGe Intelligent Platforms Proficy HistorianGe Intelligent Platforms Proficy PulseGe Intelligent Platforms Proficy Batch Execution
Weaknesses
CWE-78
CVSS scores
- v2.09.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
