Vulnerability Details CVE-2011-1919
Multiple stack-based buffer overflows in GE Intelligent Platforms Proficy Applications before 4.4.1 SIM 101 and 5.x before 5.0 SIM 43 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted TCP message traffic to (1) PRProficyMgr.exe in Proficy Server Manager, (2) PRGateway.exe in Proficy Server Gateway, (3) PRRDS.exe in Proficy Remote Data Service, or (4) PRLicenseMgr.exe in Proficy Server License Manager.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 69.4%
CVSS Severity
CVSS v2 Score 10.0
References
Products affected by CVE-2011-1919
-
cpe:2.3:a:ge:intelligent_platforms_proficy_historian:1.0
-
cpe:2.3:a:ge:intelligent_platforms_proficy_historian:2.0
-
cpe:2.3:a:ge:intelligent_platforms_proficy_historian:3.0
-
cpe:2.3:a:ge:intelligent_platforms_proficy_historian:3.1
-
cpe:2.3:a:ge:intelligent_platforms_proficy_historian:3.5
-
cpe:2.3:a:ge:intelligent_platforms_proficy_historian:4.0
-
cpe:2.3:a:ge:intelligent_platforms_proficy_historian:4.4.1
-
cpe:2.3:a:ge:intelligent_platforms_proficy_historian:5.0