CVE-2012-3010

rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through 3.5 SP1 allows remote attackers to cause a denial of service (memory corruption and service crash) or possibly execute arbitrary code via long input data, a different vulnerability than CVE-2012-3021 and CVE-2012-3026.

• CWE-20

• http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB15050Vendor Advisory
• http://support.ge-ip.com/support/resources/sites/GE_FANUC_SUPPORT/content/live/KB/15000/KB15050/en_US/GEIP12-10%20Security%20Advisory%20-%20Proficy%20Portal%20rifsrvd.pdfVendor Advisory
• http://www.securityfocus.com/bid/55935
• http://www.us-cert.gov/control_systems/pdf/ICSA-12-234-01.pdfUS Government Resource
• http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB15050Vendor Advisory
• http://support.ge-ip.com/support/resources/sites/GE_FANUC_SUPPORT/content/live/KB/15000/KB15050/en_US/GEIP12-10%20Security%20Advisory%20-%20Proficy%20Portal%20rifsrvd.pdfVendor Advisory
• http://www.securityfocus.com/bid/55935
• http://www.us-cert.gov/control_systems/pdf/ICSA-12-234-01.pdfUS Government Resource

Published

Nov 1, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-3004Multiple untrusted search path vulnerabilities in RealFlex R…
• CVE-2012-3005Untrusted search path vulnerability in Invensys Wonderware I…
• CVE-2012-3006The Innominate mGuard Smart HW before HW-101130 and BD befor…
• CVE-2012-3007Stack-based buffer overflow in slssvc.exe before 58.x in Inv…
• CVE-2012-3008Stack-based buffer overflow in OSIsoft PI OPC DA Interface b…
• CVE-2012-3009Siemens COMOS before 9.1 Patch 413, 9.2 before Update 03 Pat…
• CVE-2012-3011Directory traversal vulnerability in the web server in Fulte…
• CVE-2012-3012The Arbiter Power Sentinel 1133A device with firmware before…
• CVE-2012-3013WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758…
• CVE-2012-3014The Management Software application in GarrettCom Magnum MNS…
• CVE-2012-3015Untrusted search path vulnerability in Siemens SIMATIC STEP7…
• CVE-2012-3016Siemens SIMATIC S7-400 PN CPU devices with firmware 6 before…