CVE-2014-0751

2014-01-2522:55:04

CWE-22

[email protected]

web.nvd.nist.gov

cve-2014-0751

directory traversal

cimwebserver.exe

webview

ge intelligent platforms proficy hmi/scada

cimplicity

proficy process systems

tcp port 10212

zdi-can-1623

remote code execution

7.8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.414 Medium

EPSS

Percentile

97.3%

JSON

Directory traversal vulnerability in CimWebServer.exe (aka the WebView component) in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY before 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary code via a crafted message to TCP port 10212, aka ZDI-CAN-1623.

Affected configurations

NVD

Node

geintelligent_platforms_proficy_hmi\%2fscada_cimplicityRange≤8.2sim24

geintelligent_platforms_proficy_hmi\/scada_cimplicityMatch4.01

geintelligent_platforms_proficy_hmi\/scada_cimplicityMatch7.5

geintelligent_platforms_proficy_hmi\/scada_cimplicityMatch8.0

geintelligent_platforms_proficy_hmi\/scada_cimplicityMatch8.1

geintelligent_platforms_proficy_hmi\/scada_cimplicityMatch8.2

geintelligent_platforms_proficy_process_systems_with_cimplicityMatch-

CPENameOperatorVersion
ge:intelligent_platforms_proficy_hmi\%2fscada_cimplicityge intelligent platforms proficy hmi%2fscada cimplicityle8.2
ge:intelligent_platforms_proficy_hmi\/scada_cimplicityge intelligent platforms proficy hmi/scada cimplicityeq4.01
ge:intelligent_platforms_proficy_hmi\/scada_cimplicityge intelligent platforms proficy hmi/scada cimplicityeq7.5
ge:intelligent_platforms_proficy_hmi\/scada_cimplicityge intelligent platforms proficy hmi/scada cimplicityeq8.0
ge:intelligent_platforms_proficy_hmi\/scada_cimplicityge intelligent platforms proficy hmi/scada cimplicityeq8.1
ge:intelligent_platforms_proficy_hmi\/scada_cimplicityge intelligent platforms proficy hmi/scada cimplicityeq8.2
ge:intelligent_platforms_proficy_process_systems_with_cimplicityge intelligent platforms proficy process systems with cimplicityeq-

CPE	Name	Operator	Version
ge:intelligent_platforms_proficy_hmi\%2fscada_cimplicity	ge intelligent platforms proficy hmi%2fscada cimplicity	le	8.2
ge:intelligent_platforms_proficy_hmi\/scada_cimplicity	ge intelligent platforms proficy hmi/scada cimplicity	eq	4.01
ge:intelligent_platforms_proficy_hmi\/scada_cimplicity	ge intelligent platforms proficy hmi/scada cimplicity	eq	7.5
ge:intelligent_platforms_proficy_hmi\/scada_cimplicity	ge intelligent platforms proficy hmi/scada cimplicity	eq	8.0
ge:intelligent_platforms_proficy_hmi\/scada_cimplicity	ge intelligent platforms proficy hmi/scada cimplicity	eq	8.1
ge:intelligent_platforms_proficy_hmi\/scada_cimplicity	ge intelligent platforms proficy hmi/scada cimplicity	eq	8.2
ge:intelligent_platforms_proficy_process_systems_with_cimplicity	ge intelligent platforms proficy process systems with cimplicity	eq	-