CVE-2012-2516: An ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module (aka the HTML Help component), as used in GE I...

Security readout for executives and security teams

This CVE concerns a vulnerable ActiveX help component bundled with several GE Intelligent Platforms industrial products. Crafted input could make the component execute arbitrary commands. For executives, the concern is not broad internet-scale exploitation evidence, but legacy operational technology software that may still sit on trusted engineering or HMI workstations. Likely exposure is concentrated in legacy GE Proficy, iFIX, Pulse, Batch Execution, and SI7 I/O Driver deployments, especially engineering stations or operator workstations where the vulnerable ActiveX/HTML Help component is installed and reachable through untrusted content paths. Prioritize assessment where affected GE products support production operations or safety-relevant monitoring. The vulnerability enables command execution, but the provided evidence does not confirm active exploitation. Focus on legacy OT inventory, vendor guidance, and compensating controls for workstations that cannot be upgraded quickly. Mitigation focus: Inventory listed GE products and versions across OT and engineering workstations.; Obtain and follow GE advisory GEIP12-04 and US-CERT ICSA-12-131-02 guidance.; Restrict or disable untrusted ActiveX execution where operationally feasible..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.