Filtered by vendor Ge Fanuc
Subscribe
Total
4 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2008-0174 | 1 Ge Fanuc | 1 Proficy Real-time Information Portal | 2018-10-15 | 5.0 MEDIUM | N/A |
GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier uses HTTP Basic Authentication, which transmits usernames and passwords in base64-encoded cleartext and allows remote attackers to steal the passwords and gain privileges. | |||||
CVE-2008-0175 | 1 Ge Fanuc | 1 Proficy Real-time Information Portal | 2018-10-15 | 7.5 HIGH | N/A |
Unrestricted file upload vulnerability in GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension to the main virtual directory. | |||||
CVE-2008-0176 | 1 Ge Fanuc | 1 Cimplicity | 2018-10-15 | 10.0 HIGH | N/A |
Heap-based buffer overflow in w32rtr.exe in GE Fanuc CIMPLICITY HMI SCADA system 7.0 before 7.0 SIM 9, and earlier versions before 6.1 SP6 Hot fix - 010708_162517_6106, allow remote attackers to execute arbitrary code via unknown vectors. | |||||
CVE-2009-0216 | 1 Ge Fanuc | 1 Ifix | 2017-08-07 | 10.0 HIGH | N/A |
GE Fanuc iFIX 5.0 and earlier relies on client-side authentication involving a weakly encrypted local password file, which allows remote attackers to bypass intended access restrictions and start privileged server login sessions by recovering a password or by using a modified program module. |