CVE-2011-1918: Stack-based buffer overflow in the Data Archiver service in GE Intelligent Platforms Proficy Historian befo...

Security readout for executives and security teams

CVE-2011-1918 affects GE Intelligent Platforms Proficy Historian Data Archiver. A remote attacker could send crafted TCP traffic that crashes the service, and the sources say arbitrary code execution may be possible. Business impact is highest where legacy Historian systems support operational reporting or control-system data continuity. Exposure is likely limited to organizations still running affected Proficy Historian versions, especially if the Data Archiver service is reachable across plant, corporate, vendor, or remote-access networks. Prioritize remediation where affected Historian systems are still operational, network reachable, or support production visibility. If systems are retired or isolated, confirm that status and document residual risk. The age of the CVE lowers novelty, not impact for exposed legacy infrastructure. Mitigation focus: Upgrade Proficy Historian to 3.5 SIM 17, 4.0 SIM 12, or later supported guidance.; Restrict network access to the Data Archiver service to trusted management and Historian hosts.; Check GE or successor vendor advisories for current support and compensating controls..

Prepared

Jun 27, 2026, 17:48 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.