CVE-2012-3797: Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earli...

Security readout for executives and security teams

CVE-2012-3797 affects older Pro-face industrial HMI/server software. A remote attacker could send a malformed short packet that may crash the service through heap memory corruption. The sources also mention possible unspecified other impact, but do not provide enough detail to confirm code execution or broader compromise. Exposure is most likely where legacy Pro-face WinGP PC Runtime or Pro-Server EX systems are still deployed and reachable over a network. The bundle does not identify affected ports, default configurations, or internet exposure patterns. Address during legacy industrial system risk reduction, especially if affected software supports operational technology workflows. Urgency rises if reachable from broader corporate networks or remote access paths. Mitigation focus: Inventory Pro-face WinGP PC Runtime and Pro-Server EX installations and versions.; Check Pro-face vendor guidance and apply the referenced update where applicable.; Remove or isolate unsupported affected versions from untrusted networks..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.