CVE-2014-0751
25.01.2014, 22:55
Directory traversal vulnerability in CimWebServer.exe (aka the WebView component) in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY before 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary code via a crafted message to TCP port 10212, aka ZDI-CAN-1623.
Path Traversal
| Vendor | Product | Version |
|---|---|---|
| ge | intelligent_platforms_proficy_hmi\%2fscada_cimplicity | 𝑥 ≤ 8.2 |
| ge | intelligent_platforms_proficy_hmi\/scada_cimplicity | 4.01 |
| ge | intelligent_platforms_proficy_hmi\/scada_cimplicity | 7.5 |
| ge | intelligent_platforms_proficy_hmi\/scada_cimplicity | 8.0 |
| ge | intelligent_platforms_proficy_hmi\/scada_cimplicity | 8.1 |
| ge | intelligent_platforms_proficy_hmi\/scada_cimplicity | 8.2 |
| ge | intelligent_platforms_proficy_process_systems_with_cimplicity | - |
𝑥
= Vulnerable software versions
References