CVE-2013-2785

2022-10-0316:14:59

CWE-119

[email protected]

web.nvd.nist.gov

cve-2013-2785

buffer overflow

cimwebserver.exe

ge intelligent platforms

proficy hmi/scada

cimplicity

remote code execution

tcp

port 10212

zdi-can-1621

zdi-can-1624

8 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.007 Low

EPSS

Percentile

80.6%

JSON

Multiple buffer overflows in CimWebServer.exe in the WebView component in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY before 8.0 SIM 27, 8.1 before SIM 25, and 8.2 before SIM 19, and Proficy Process Systems with CIMPLICITY, allow remote attackers to execute arbitrary code via crafted data in packets to TCP port 10212, aka ZDI-CAN-1621 and ZDI-CAN-1624.

Affected configurations

NVD

Node

geintelligent_platforms_proficy_hmi\/scada_cimplicityMatch8.0

geintelligent_platforms_proficy_hmi\/scada_cimplicityMatch8.1

geintelligent_platforms_proficy_hmi\/scada_cimplicityMatch8.2

geintelligent_platforms_proficy_process_systems_with_cimplicityMatch-

CPENameOperatorVersion
ge:intelligent_platforms_proficy_hmi\/scada_cimplicityge intelligent platforms proficy hmi/scada cimplicityeq8.0
ge:intelligent_platforms_proficy_hmi\/scada_cimplicityge intelligent platforms proficy hmi/scada cimplicityeq8.1
ge:intelligent_platforms_proficy_hmi\/scada_cimplicityge intelligent platforms proficy hmi/scada cimplicityeq8.2
ge:intelligent_platforms_proficy_process_systems_with_cimplicityge intelligent platforms proficy process systems with cimplicityeq-

CPE	Name	Operator	Version
ge:intelligent_platforms_proficy_hmi\/scada_cimplicity	ge intelligent platforms proficy hmi/scada cimplicity	eq	8.0
ge:intelligent_platforms_proficy_hmi\/scada_cimplicity	ge intelligent platforms proficy hmi/scada cimplicity	eq	8.1
ge:intelligent_platforms_proficy_hmi\/scada_cimplicity	ge intelligent platforms proficy hmi/scada cimplicity	eq	8.2
ge:intelligent_platforms_proficy_process_systems_with_cimplicity	ge intelligent platforms proficy process systems with cimplicity	eq	-