CVE-2012-0230: PRRDS.exe in the Proficy Remote Data Service in GE Intelligent Platforms Proficy Plant Applications 5.0 and...

Security readout for executives and security teams

This is a legacy industrial software flaw in GE Proficy Plant Applications. A network attacker who can reach the Remote Data Service on TCP port 12299 could crash the service and may be able to run code. The main business risk is disruption to plant-application availability, with possible deeper compromise if the service is exposed. Exposure is likely limited to organizations still running Proficy Plant Applications 5.0 or earlier with PRRDS.exe reachable on TCP/12299. Risk increases if that service is reachable from enterprise networks, remote-access paths, or the internet. Prioritize within OT risk management if this product exists in production. Treat as high urgency when TCP/12299 is reachable beyond tightly controlled plant networks. Without evidence of active exploitation in the bundle, this is not KEV-driven emergency work, but legacy exposure should be reduced promptly. Mitigation focus: Check GE KB14766 and US-CERT ICSA-12-032-02 for vendor-approved fixes or workarounds.; Restrict TCP/12299 access to required trusted systems only.; Segment affected Proficy systems from enterprise and internet-reachable networks..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.