CVE-2012-3794: Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earli...

Security readout for executives and security teams

This CVE affects older Pro-face industrial HMI/server software. A remote attacker can send malformed network traffic that causes the runtime or ProServr.exe service to crash. The known impact is denial of service, not data theft or code execution, but outages in operational technology environments can still disrupt monitoring or operations. Exposure is most likely in legacy industrial control environments still running affected Pro-face WinGP PC Runtime or Pro-Server EX versions with the service reachable over a network. Treat this as a targeted operational resilience issue. Prioritize assets connected to production, safety, or remote-access networks, especially where downtime would affect plant visibility or control operations. Mitigation focus: Inventory Pro-face WinGP PC Runtime and Pro-Server EX installations and versions.; Check Pro-face vendor advisory and update readme for supported fixed releases.; Restrict network access to affected services from untrusted networks..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.