NVD

Id
44275  
Name
CVE-2012-2516  
Description
An ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module (aka the HTML Help component), as used in GE Intelligent Platforms Proficy Historian 3.1, 3.5, 4.0, and 4.5; Proficy HMI/SCADA iFIX 5.0 and 5.1; Proficy Pulse 1.0; Proficy Batch Execution 5.6; SI7 I/O Driver 7.20 through 7.42; and other products, allows remote attackers to execute arbitrary commands via crafted input, related to a "command injection vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-07-04  
Modified Date
2012-07-17  
Seq
2012-2516  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
222249 44275 CVE-2012-2516 http://support.ge-ip.com/support/resources/sites/GE_FANUC_SUPPORT/content/live/KB/14000/KB14863/en_US/GEIP12-04%20Security%20Advisory%20-%20Proficy%20HTML%20Help.pdf  View
222250 44275 CVE-2012-2516 http://www.us-cert.gov/control_systems/pdf/ICSA-12-131-02.pdf  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27307 JVNDB-2012-003014 GE Intelligent Platforms 製品で使用される KeyWorks KeyHelp における任意のコマンドを実行される脆弱性 複数の GE Intelligent Platforms 製品で使用される KeyWorks KeyHelp モジュールの KeyHelp.ocx 内の ActiveX コントロールには、任意のコマンドを実行される脆弱性が存在します。 CVE-2012-2516 55754 CVE-2012-2516 44275 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003014.html 2012-04-24 2012-07-06 View