Ge Intelligent Platforms Proficy Hmi/scada Ifix vulnerabilities

4 CVEs affecting Ge Intelligent Platforms Proficy Hmi/scada Ifix, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-2823, published 2013-11-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-2516, published 2012-07-05. High severity, CVSS 9.3. EPSS: 39.7% chance of exploitation in the next 30 days. An ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module (aka the HTML Help component), as used in GE Intelligent Platforms Proficy Historian 3.1, 3.5, 4.0, and 4.5; Proficy HMI/SCADA iFIX 5.0…
CVE-2012-2515, published 2012-07-05. High severity, CVSS 9.3. EPSS: 27.6% chance of exploitation in the next 30 days. Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHelp Module (aka the HTML Help component), as used in EMC Documentum…
CVE-2013-2811, published 2013-11-22. High severity, CVSS 7.1. EPSS: 1.8% chance of exploitation in the next 30 days. The (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy DNP3 I/O driver before 7.20k, as used in DNPDrv.exe (aka the DNP master station server) in GE Intelligent…
CVE-2013-2823, published 2013-11-22. Medium severity, CVSS 4.7. EPSS: 0.8% chance of exploitation in the next 30 days. The (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy DNP3 I/O driver before 7.20k, as used in DNPDrv.exe (aka the DNP master station server) in GE Intelligent…