CVE-2012-3793: Integer overflow in Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server E...

Security readout for executives and security teams

This vulnerability can let a remote attacker crash affected Pro-face runtime/server software with a specially crafted network packet. The documented impact is denial of service, not data theft or code execution. In industrial environments, a crashed HMI or server component can still disrupt operations if the service is exposed or operationally critical. Exposure is most likely where affected Pro-face WinGP PC Runtime or Pro-Server EX instances are reachable over a network. Internet exposure is not stated in the sources. Internal OT networks may still be exposed if untrusted hosts can reach the affected service. Treat this as a targeted availability risk for industrial systems. Prioritize environments where Pro-face services support operations or are reachable from broad internal networks. The urgency rises if affected systems bridge IT and OT networks. Mitigation focus: Identify affected Pro-face WinGP and Pro-Server EX installations.; Check Pro-face vendor advisory and readme for fixed versions or supported updates.; Restrict affected service access to trusted management and OT hosts only..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.