GE Proficy HMI/scada cimplicity DoS Vulnerability

Release date: 2012-6 6
Updated on: 2013-01-10

Affected Systems:
General Electric Proficy HMI/SCADA-CIMPLICITY 4.01
General Electric Proficy M/SCADA-CIMPLICITY
Description:
--------------------------------------------------------------------------------
Bugtraq id: 57188
CVE (CAN) ID: CVE-2012-4689
 
GE Proficy HMI/SCADA-CIMPLICITY is a software for monitoring and controlling scada equipment.
 
GE Proficy HMI/SCADA-CIMPLICITY 4.01 and other versions have security vulnerabilities that can be exploited by attackers to corrupt affected applications and cause legal user Denial of Service.
 
<* Source: Kuang-Chun Hung
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
General Electric
----------------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
 
Http://www.ge-ip.com/products/2420