CVE-2012-0232

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-03-15 · updated 2026-06-16
Weakness: CWE-22

Description

Directory traversal vulnerability in rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6, 3.0, 3.0 SP1, and 3.5 allows remote attackers to modify the configuration via crafted strings.

Affected products

GE Intelligent Platforms Proficy Real-Time Information Portal: 2.6, 3.0, 3.0-sp1, 3.5

References

http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB14768
http://www.securityfocus.com/bid/52439
http://www.us-cert.gov/control_systems/pdf/ICSA-12-032-03.pdf
http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB14768
http://www.securityfocus.com/bid/52439
http://www.us-cert.gov/control_systems/pdf/ICSA-12-032-03.pdf

Get alerted when CVE-2012-0232 or the next vulnerability affects your stack