GE-Fanuc's Proficy Information Portal 2.6 is "a web based reporting application for the SCADA environment. As such it will usually be installed in a buffer zone between the SCADA and the corporate network, which makes it a very sensitive application as it can reach both networks". Two security vulnerability have been discovered in GE's Fanuc Proficy Information portal which would allow remote attackers unauthorized access to the system as well as the ability to execute arbitrary code by leveraging a security issue in the product.
http://www.securiteam.com/securitynews/5WP0O2KN5E.html
