CVE-2014-0750
25.01.2014, 22:55
Directory traversal vulnerability in gefebt.exe in the WebView CimWeb components in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY through 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary code via a crafted HTTP request, aka ZDI-CAN-1622.
Path Traversal
| Vendor | Product | Version |
|---|---|---|
| ge | intelligent_platforms_proficy_hmi\%2fscada_cimplicity | 𝑥 ≤ 8.2 |
| ge | intelligent_platforms_proficy_hmi\/scada_cimplicity | 4.01 |
| ge | intelligent_platforms_proficy_hmi\/scada_cimplicity | 7.5 |
| ge | intelligent_platforms_proficy_hmi\/scada_cimplicity | 8.0 |
| ge | intelligent_platforms_proficy_hmi\/scada_cimplicity | 8.1 |
| ge | intelligent_platforms_proficy_hmi\/scada_cimplicity | 8.2 |
| ge | intelligent_platforms_proficy_process_systems_with_cimplicity | - |
𝑥
= Vulnerable software versions
References