Description
PRRDS.exe in the Proficy Remote Data Service in GE Intelligent Platforms Proficy Plant Applications 5.0 and earlier allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted TCP session on port 12299.
References
- 52434 vdb-entry
- proficy-plant-prrds-code-exec(73956) vdb-entry
- 48415 third-party-advisory
- http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB14766
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-032-02.pdf