CVE-2016-9360

🗓️ 13 Feb 2017 21:00:00Reported by icscertType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 61 Views

An issue in GE Proficy HMI/SCADA iFIX Version 5.8 SIM 13 & prior, CIMPLICITY Version 9.0 & prior & Historian Version 6.0 & prior allows password retrieval

Reporter	Title	Published	Views	Family All 10
CNVD	Local Information Disclosure Vulnerability in Multiple GE Products	20 Jan 201700:00	–	cnvd
Cvelist	CVE-2016-9360	13 Feb 201721:00	–	cvelist
EUVD	EUVD-2016-10170	7 Oct 202500:30	–	euvd
ICS	GE Proficy HMI/SCADA iFIX, Proficy HMI/SCADA CIMPLICITY, and Proficy Historian Vulnerability	17 Jan 201700:00	–	ics
ICS	GE Proficy HMI/SCADA iFIX, Proficy HMI/SCADA CIMPLICITY, and Proficy Historian Vulnerability (Update A)	17 Jan 201700:00	–	ics
ICS	GE Proficy HMI/SCADA iFIX, Proficy HMI/SCADA CIMPLICITY, and Proficy Historian Vulnerability (Update B)	18 May 201712:00	–	ics
NVD	CVE-2016-9360	13 Feb 201721:59	–	nvd
OSV	CVE-2016-9360	13 Feb 201721:59	–	osv
Prion	Session fixation	13 Feb 201721:59	–	prion
Positive Technologies	PT-2016-41: Information Disclosure in GE Proficy HMI/SCADA iFIX, Proficy HMI/SCADA CIMPLICITY, and Proficy Historian	5 Aug 201500:00	–	ptsecurity

NVD

Vulners

Node

ge cimplicityRange≤9.0

ge historianRange≤6.0

ge ifixRange≤5.8

[
  {
    "product": "GE Proficy HMI/SCADA iFIX, Proficy HMI/SCADA CIMPLICITY, and Proficy Historian",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "GE Proficy HMI/SCADA iFIX, Proficy HMI/SCADA CIMPLICITY, and Proficy Historian"
      }
    ]
  }
]

Source	Link
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-16-336-05A
securitytracker	www.securitytracker.com/id/1037809
securityfocus	www.securityfocus.com/bid/95630

13 May 2026 00:24Current

6.3Medium risk

Vulners AI Score6.3

CVSS 24.4

CVSS 3.16.7

EPSS0.00156

CWE-522

cve-2016-9360 general electric ge proficy hmi scada ifix cimplicity historian password retrieval vulnerability security issue