CVE-2013-0653

2013-01-2718:55:00

CWE-22

[email protected]

web.nvd.nist.gov

100

cve-2013-0653

directory traversal

webview cimweb

ge intelligent platforms

proficy hmi/scada

cimplicity

proficy process systems

vulnerability

remote attackers

arbitrary files

6.8 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.015 Low

EPSS

Percentile

86.6%

JSON

Directory traversal vulnerability in substitute.bcl in the WebView CimWeb subsystem in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPLICITY, allows remote attackers to read arbitrary files via a crafted packet.

CPENameOperatorVersion
ge:intelligent_platforms_proficy_hmi\/scada_cimplicityge intelligent platforms proficy hmi\/scada cimplicityeq8.0
ge:intelligent_platforms_proficy_hmi\/scada_cimplicityge intelligent platforms proficy hmi\/scada cimplicityeq4.01
ge:intelligent_platforms_proficy_hmi\/scada_cimplicityge intelligent platforms proficy hmi\/scada cimplicityeq7.5
ge:intelligent_platforms_proficy_process_systems_with_cimplicityge intelligent platforms proficy process systems with cimplicityeq-
ge:intelligent_platforms_proficy_process_systemsge intelligent platforms proficy process systemseq-

CPE	Name	Operator	Version
ge:intelligent_platforms_proficy_hmi\/scada_cimplicity	ge intelligent platforms proficy hmi\/scada cimplicity	eq	8.0
ge:intelligent_platforms_proficy_hmi\/scada_cimplicity	ge intelligent platforms proficy hmi\/scada cimplicity	eq	4.01
ge:intelligent_platforms_proficy_hmi\/scada_cimplicity	ge intelligent platforms proficy hmi\/scada cimplicity	eq	7.5
ge:intelligent_platforms_proficy_process_systems_with_cimplicity	ge intelligent platforms proficy process systems with cimplicity	eq	-
ge:intelligent_platforms_proficy_process_systems	ge intelligent platforms proficy process systems	eq	-