Ge Intelligent Platforms Proficy Pulse vulnerabilities

2 CVEs affecting Ge Intelligent Platforms Proficy Pulse, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-2516, published 2012-07-05.

More from Ge.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2012-2516, published 2012-07-05. High severity, CVSS 9.3. EPSS: 39.7% chance of exploitation in the next 30 days. An ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module (aka the HTML Help component), as used in GE Intelligent Platforms Proficy Historian 3.1, 3.5, 4.0, and 4.5; Proficy HMI/SCADA iFIX 5.0…
• CVE-2012-2515, published 2012-07-05. High severity, CVSS 9.3. EPSS: 27.6% chance of exploitation in the next 30 days. Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHelp Module (aka the HTML Help component), as used in EMC Documentum…