Directory traversal vulnerability in gefebt.exe in the WebView CimWeb components in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY through 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary code via a crafted HTTP request, aka ZDI-CAN-1622.
References
| Link | Resource |
|---|---|
| http://ics-cert.us-cert.gov/advisories/ICSA-14-023-01 | US Government Resource |
| http://support.ge-ip.com/support/index?page=kbchannel&id=KB15939 | Vendor Advisory |
| http://www.securityfocus.com/bid/65124 | |
| http://ics-cert.us-cert.gov/advisories/ICSA-14-023-01 | US Government Resource |
| http://support.ge-ip.com/support/index?page=kbchannel&id=KB15939 | Vendor Advisory |
| http://www.securityfocus.com/bid/65124 |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 02:02
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://ics-cert.us-cert.gov/advisories/ICSA-14-023-01 - US Government Resource | |
| References | () http://support.ge-ip.com/support/index?page=kbchannel&id=KB15939 - Vendor Advisory | |
| References | () http://www.securityfocus.com/bid/65124 - |
Information
Published : 2014-01-25 22:55
Updated : 2024-11-21 02:02
NVD link : CVE-2014-0750
Mitre link : CVE-2014-0750
CVE.ORG link : CVE-2014-0750
JSON object : View
Products Affected
ge
- intelligent_platforms_proficy_process_systems_with_cimplicity
- intelligent_platforms_proficy_hmi\%2fscada_cimplicity
- intelligent_platforms_proficy_hmi\/scada_cimplicity
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')