CVE-2012-2516: Ge Intelligent Platforms Proficy Batch Execution

High severity, CVSS 9.3. EPSS: 39.7% chance of exploitation in the next 30 days.

An ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module (aka the HTML Help component), as used in GE Intelligent Platforms Proficy Historian 3.1, 3.5, 4.0, and 4.5; Proficy HMI/SCADA iFIX 5.0 and 5.1; Proficy Pulse 1.0; Proficy Batch Execution 5.6; SI7 I/O Driver 7.20 through 7.42; and other products, allows remote attackers to execute arbitrary commands via crafted input, related to a "command injection vulnerability."

Affected products

• Ge Intelligent Platforms Proficy Batch Execution: version 5.6 only
• Ge Intelligent Platforms Proficy Historian: version 3.1 only; version 3.5 only; version 4.0 only; version 4.5 only
• Ge Intelligent Platforms Proficy Hmi/scada Ifix: version 5.0 only; version 5.1 only
• Ge Intelligent Platforms Proficy Pulse: version 1.0 only
• Ge Intelligent Platforms SI7 I/o Driver: version 7.20 only; version 7.42 only

Published 2012-07-05. Last modified 2026-06-16.