An issue was discovered in General Electric (GE) Proficy HMI/SCADA iFIX Version 5.8 SIM 13 and prior versions, Proficy HMI/SCADA CIMPLICITY Version 9.0 and prior versions, and Proficy Historian Version 6.0 and prior versions. An attacker may be able to retrieve user passwords if he or she has access to an authenticated session.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/95630 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1037809 | Third Party Advisory VDB Entry |
| https://ics-cert.us-cert.gov/advisories/ICSA-16-336-05A | Mitigation Third Party Advisory US Government Resource |
| http://www.securityfocus.com/bid/95630 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1037809 | Third Party Advisory VDB Entry |
| https://ics-cert.us-cert.gov/advisories/ICSA-16-336-05A | Mitigation Third Party Advisory US Government Resource |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 03:01
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.securityfocus.com/bid/95630 - Third Party Advisory, VDB Entry | |
| References | () http://www.securitytracker.com/id/1037809 - Third Party Advisory, VDB Entry | |
| References | () https://ics-cert.us-cert.gov/advisories/ICSA-16-336-05A - Mitigation, Third Party Advisory, US Government Resource |
Information
Published : 2017-02-13 21:59
Updated : 2024-11-21 03:01
NVD link : CVE-2016-9360
Mitre link : CVE-2016-9360
CVE.ORG link : CVE-2016-9360
JSON object : View
Products Affected
ge
- historian
- cimplicity
- ifix
CWE
CWE-522
Insufficiently Protected Credentials