Vulnerabilities

TI-2009-00201 CVE-2009-0216 · GHSA-9h9r-cr53-4958

GE Fanuc iFIX 5.0 and earlier relies on client-side authentication involving a weakly…

MEDIUM 48

GE Fanuc iFIX 5.0 and earlier relies on client-side authentication involving a weakly encrypted local password file, which allows remote attackers to bypass intended access restrictions and start privileged server login…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02984 Published 2009-02-13 No fix listed CWE-255

TI-2008-00161 CVE-2008-0176 · GHSA-7wpp-cm3h-c84r

Heap-based buffer overflow in w32rtr.exe in GE Fanuc CIMPLICITY HMI SCADA system 7.0…

MEDIUM 54

Heap-based buffer overflow in w32rtr.exe in GE Fanuc CIMPLICITY HMI SCADA system 7.0 before 7.0 SIM 9, and earlier versions before 6.1 SP6 Hot fix - 010708_162517_6106, allow remote attackers to execute arbitrary code vi…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07917 Published 2008-01-29 No fix listed CWE-119

TI-2008-00160 CVE-2008-0175 · GHSA-qfhg-r7xq-4997

Unrestricted file upload vulnerability in GE Fanuc Proficy Real-Time Information Portal…

MEDIUM 49

Unrestricted file upload vulnerability in GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension to the main virtu…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.15436 Published 2008-01-29 No fix listed

Vulnerabilities

Filters

GE Fanuc iFIX 5.0 and earlier relies on client-side authentication involving a weakly…

Heap-based buffer overflow in w32rtr.exe in GE Fanuc CIMPLICITY HMI SCADA system 7.0…

Unrestricted file upload vulnerability in GE Fanuc Proficy Real-Time Information Portal…