Vulnerabilities > GE Fanuc

DATE CVE VULNERABILITY TITLE RISK
2009-02-13 CVE-2009-0216 Credentials Management vulnerability in GE Fanuc Ifix
GE Fanuc iFIX 5.0 and earlier relies on client-side authentication involving a weakly encrypted local password file, which allows remote attackers to bypass intended access restrictions and start privileged server login sessions by recovering a password or by using a modified program module.
network
low complexity
ge-fanuc CWE-255
critical
10.0
2008-01-29 CVE-2008-0176 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in GE Fanuc Cimplicity
Heap-based buffer overflow in w32rtr.exe in GE Fanuc CIMPLICITY HMI SCADA system 7.0 before 7.0 SIM 9, and earlier versions before 6.1 SP6 Hot fix - 010708_162517_6106, allow remote attackers to execute arbitrary code via unknown vectors.
network
low complexity
ge-fanuc CWE-119
critical
10.0
2008-01-29 CVE-2008-0175 Remote Script Code Execution vulnerability in GE Fanuc Proficy Portal
Unrestricted file upload vulnerability in GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension to the main virtual directory.
network
low complexity
ge-fanuc
7.5