Description
PRLicenseMgr.exe in the Proficy Server License Manager in GE Intelligent Platforms Proficy Plant Applications 5.0 and earlier allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted TCP session on port 12401.
Advisories 1
- ICSA-12-032-02 GE Intelligent Platforms Proficy Plant Applications Memory Corruption Vulnerabilities CISA ICS & IT advisories · Jun 6, 2025
References
- 52434 vdb-entry
- 48415 third-party-advisory
- http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB14766
- proficy-prlicensemgr-code-exec(73957) vdb-entry
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-032-02.pdf