Vulnerability Note VU#339345
GE Fanuc Proficy Information Portal allows arbitrary file upload and execution
GE Fanuc Proficy Information Portal allows authenticated users to upload arbitrary files. An attacker could upload an executable server-side script (e.g., an .asp shell on a Microsoft Internet Information Server platform) and execute arbitrary commands with the privileges of the web server.
GE Fanuc Proficy Information Portal is a web-based systems reporting tool often used to consolidate and integrate online and process-based systems data between Supervisory Control And Data Acquisition (SCADA) systems and the corporate network. Proficy Information Portal supports an "Add WebSource" feature that allows authenticated users to upload arbitrary files to the server. An uploaded file can subsequently be executed by requesting it with a web browser.
This vulnerability affects GE Fanuc Proficy Information Portal up to and including version 2.6.
By uploading a file that can be executed by the web server (e.g., an .asp shell), a remote, authenticated attacker may be able to execute arbitrary code. The attacker could exploit this behavior to access SCADA networks.
Systems Affected (Learn More)
|Vendor||Status||Date Notified||Date Updated|
|GE Fanuc||Affected||20 Dec 2007||25 Jan 2008|
CVSS Metrics (Learn More)
This vulnerability was reported by Eyal Udassin of C4 Security.
This document was written by Chris Taschner.
- CVE IDs: CVE-2008-0175
- Date Public: 24 Jan 2008
- Date First Published: 25 Jan 2008
- Date Last Updated: 18 Dec 2008
- Severity Metric: 0.84
- Document Revision: 45
If you have feedback, comments, or additional information about this vulnerability, please send us email.