Multiple vulnerabilities have been reported in Proficy Real-Time Information Portal, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system.

The vulnerabilities are caused due to unspecified errors in the Remote Interface Service and can be exploited via specially crafted packets sent to TCP port 5159.

Successful exploitation may allow execution of arbitrary code.

The vulnerabilities are reported in version 2.6, 3.0, 3.0 SP1, 3.5, and 3.5 SP1.

Solution
Reportedly patches have been released. Contact the vendor for further information.

Provided and/or discovered by
Kuang-Chun Hung, Information and Communication Security Technology Center (ICST).

Original Advisory
ICS-CERT:
http://www.us-cert.gov/control_systems/pdf/ICSA-12-234-01.pdf

Deep Links
Links available to Secunia VIM customers