CVE-2014-0750

2014-01-2522:55:00

CWE-22

[email protected]

web.nvd.nist.gov

cve-2014-0750

directory traversal vulnerability

gefebt.exe

ge intelligent platforms

proficy hmi

scada

cimplicity

remote code execution

zdi-can-1622

nvd

7.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.398 Low

EPSS

Percentile

97.3%

JSON

Directory traversal vulnerability in gefebt.exe in the WebView CimWeb components in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY through 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary code via a crafted HTTP request, aka ZDI-CAN-1622.

CPENameOperatorVersion
ge:intelligent_platforms_proficy_hmi\/scada_cimplicityge intelligent platforms proficy hmi\/scada cimplicityeq8.0
ge:intelligent_platforms_proficy_process_systems_with_cimplicityge intelligent platforms proficy process systems with cimplicityeq-
ge:intelligent_platforms_proficy_hmi\/scada_cimplicityge intelligent platforms proficy hmi\/scada cimplicityeq8.1
ge:intelligent_platforms_proficy_hmi\%2fscada_cimplicityge intelligent platforms proficy hmi\%2fscada cimplicityle8.2
ge:intelligent_platforms_proficy_hmi\/scada_cimplicityge intelligent platforms proficy hmi\/scada cimplicityeq4.01
ge:intelligent_platforms_proficy_hmi\/scada_cimplicityge intelligent platforms proficy hmi\/scada cimplicityeq8.2
ge:intelligent_platforms_proficy_hmi\/scada_cimplicityge intelligent platforms proficy hmi\/scada cimplicityeq7.5

CPE	Name	Operator	Version
ge:intelligent_platforms_proficy_hmi\/scada_cimplicity	ge intelligent platforms proficy hmi\/scada cimplicity	eq	8.0
ge:intelligent_platforms_proficy_process_systems_with_cimplicity	ge intelligent platforms proficy process systems with cimplicity	eq	-
ge:intelligent_platforms_proficy_hmi\/scada_cimplicity	ge intelligent platforms proficy hmi\/scada cimplicity	eq	8.1
ge:intelligent_platforms_proficy_hmi\%2fscada_cimplicity	ge intelligent platforms proficy hmi\%2fscada cimplicity	le	8.2
ge:intelligent_platforms_proficy_hmi\/scada_cimplicity	ge intelligent platforms proficy hmi\/scada cimplicity	eq	4.01
ge:intelligent_platforms_proficy_hmi\/scada_cimplicity	ge intelligent platforms proficy hmi\/scada cimplicity	eq	8.2
ge:intelligent_platforms_proficy_hmi\/scada_cimplicity	ge intelligent platforms proficy hmi\/scada cimplicity	eq	7.5