Skip to content
Noroxi

GE records

128 published records for vendor ge.

Researcher profile

Entered KEV
0 · 0%
Weaponized
5 · 3.9%
Pre-auth RCE
25
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

128 records
  • CVE-2014-0750
    51Plan

    GE Proficy HMI/SCADA Path Traversal

    HighCVSS 7.5WeaponizedEPSS 70%

    ge · intelligent platforms proficy hmi\%2fscada cimplicityJan 25, 2014

  • CVE-2012-2516
    49Plan

    An ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module (aka the HTML Help component), as used in GE Intelligent Platforms Proficy Hist

    CriticalCVSS 9.3WeaponizedEPSS 40%

    ge · intelligent platforms proficy batch executionJul 4, 2012

  • CVE-2012-2515
    45Plan

    Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHelp Module (aka the HT

    CriticalCVSS 9.3WeaponizedEPSS 28%

    emc · captiva quickscan proJul 4, 2012

  • CVE-2023-0755
    43Plan

    The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remote

    CriticalCVSS 9.8No exploitEPSS 12%

    ge · digital industrial gateway serverFeb 23, 2023

  • CVE-2012-0230
    43Plan

    PRRDS.exe in the Proficy Remote Data Service in GE Intelligent Platforms Proficy Plant Applications 5.0 and earlier allows remote attackers

    CriticalCVSS 10.0No exploitEPSS 9%

    ge · intelligent platforms proficy plant applicationsMar 15, 2012

  • CVE-2020-27265
    42Plan

    KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All ver

    CriticalCVSS 9.8No exploitEPSS 10%

    ge · industrial gateway serverJan 13, 2021

  • CVE-2012-0231
    42Plan

    PRLicenseMgr.exe in the Proficy Server License Manager in GE Intelligent Platforms Proficy Plant Applications 5.0 and earlier allows remote

    CriticalCVSS 10.0No exploitEPSS 7%

    ge · intelligent platforms proficy plant applicationsMar 15, 2012

  • CVE-2011-1918
    42Plan

    Stack-based buffer overflow in the Data Archiver service in GE Intelligent Platforms Proficy Historian before 3.5 SIM 17 and 4.x before 4.0

    CriticalCVSS 10.0No exploitEPSS 6%

    ge · intelligent platforms proficy historianNov 2, 2011

  • CVE-2012-3026
    42Plan

    rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through 3.5 SP1 allows remo

    CriticalCVSS 10.0No exploitEPSS 5%

    ge · intelligent platforms proficy real-time information portalNov 1, 2012

  • CVE-2012-3021
    42Plan

    rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through 3.5 SP1 allows remo

    CriticalCVSS 10.0No exploitEPSS 5%

    ge · intelligent platforms proficy real-time information portalNov 1, 2012

  • CVE-2012-3010
    42Plan

    rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through 3.5 SP1 allows remo

    CriticalCVSS 10.0No exploitEPSS 5%

    ge · intelligent platforms proficy real-time information portalNov 1, 2012

  • CVE-2018-5473
    41Plan

    An Improper Restriction of Operations within the Bounds of a Memory Buffer issue was discovered in GE D60 Line Distance Relay devices runnin

    CriticalCVSS 9.8No exploitEPSS 6%

    ge · d60 line distance relay firmwareFeb 19, 2018

  • CVE-2012-0229
    41Plan

    The Data Archiver service in GE Intelligent Platforms Proficy Historian 4.5 and earlier allows remote attackers to cause a denial of service

    CriticalCVSS 10.0No exploitEPSS 5%

    ge · intelligent platforms proficy historianMar 15, 2012

  • CVE-2011-1919
    41Plan

    Multiple stack-based buffer overflows in GE Intelligent Platforms Proficy Applications before 4.4.1 SIM 101 and 5.x before 5.0 SIM 43 allow

    CriticalCVSS 10.0No exploitEPSS 5%

    ge · intelligent platforms proficy historianNov 2, 2011

  • CVE-2015-6459
    41Plan

    Absolute path traversal vulnerability in the download feature in FileDownloadServlet in GE Digital Energy MDS PulseNET and MDS PulseNET Ente

    CriticalCVSS 10.0No exploitEPSS 3%

    ge · mds pulsenetSep 18, 2015

  • CVE-2016-5788
    41Plan

    General Electric (GE) Bently Nevada 3500/22M USB with firmware before 5.0 and Bently Nevada 3500/22M Serial have open ports, which makes it

    CriticalCVSS 10.0No exploitEPSS 2%

    ge · bently nevada 3500\/22m usb firmwareNov 24, 2016

  • CVE-2018-10611
    40Plan

    Java remote method invocation (RMI) input port in GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior may be exploited to al

    CriticalCVSS 9.8No exploitEPSS 5%

    ge · mds pulsenetJun 4, 2018

  • CVE-2017-14002
    40Plan

    GE Infinia/Infinia with Hawkeye 4 medical imaging systems all current versions are affected these devices use default or hard-coded credenti

    CriticalCVSS 9.8No exploitEPSS 5%

    ge · infinia hawkeye 4 firmwareMar 20, 2018

  • CVE-2018-5475
    40Plan

    A Stack-based Buffer Overflow issue was discovered in GE D60 Line Distance Relay devices running firmware Version 7.11 and prior.

    CriticalCVSS 9.8No exploitEPSS 4%

    ge · d60 line distance relay firmwareFeb 19, 2018

  • CVE-2022-2825
    40Plan

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0.

    CriticalCVSS 9.8No exploitEPSS 3%

    ge · industrial gateway serverMar 29, 2023

  • CVE-2016-2310
    40Plan

    General Electric (GE) Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware before 5.5.0 and ML810, ML3000, and ML3100 switches

    CriticalCVSS 9.8No exploitEPSS 3%

    ge · multilink firmwareJun 9, 2016

  • CVE-2017-14008
    40Plan

    GE Centricity PACS RA1000, diagnostic image analysis, all current versions are affected these devices use default or hard-coded credentials.

    CriticalCVSS 9.8No exploitEPSS 3%

    ge · centricity pacs ra1000Mar 20, 2018

  • CVE-2023-0754
    40Plan

    The affected products are vulnerable to an integer overflow or wraparound, which could  allow an attacker to crash the server and remotely

    CriticalCVSS 9.8No exploitEPSS 3%

    ge · digital industrial gateway serverFeb 23, 2023

  • CVE-2020-12017
    40Plan

    GE Grid Solutions Reason RT Clocks, RT430, RT431, and RT434, all firmware versions prior to 08A05.

    CriticalCVSS 9.8No exploitEPSS 2%

    ge · rt430 firmwareJun 2, 2020

  • CVE-2008-0174
    40Plan

    GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier uses HTTP Basic Authentication, which transmits usernames and passwords in bas

    CriticalCVSS 9.8No exploitEPSS 2%

    ge · proficy real-time information portalJan 28, 2008