CVE-2014-0750
Directory traversal vulnerability in gefebt.exe in the WebView CimWeb components in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY through 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary code via a crafted HTTP request, aka ZDI-CAN-1622.
- Score
- CVSS 2.0 7.5 High
- Status
- Modified - ics-cert@hq.dhs.gov
- Published
- 2014-01-25
- Last modified
- 2025-08-22
- Weaknesses
- CWE-22
Affected products
- Intelligent Platforms Proficy Hmi%2fscada Cimplicity (Ge)
- Intelligent Platforms Proficy Hmi/scada Cimplicity (Ge)
- Intelligent Platforms Proficy Process Systems With Cimplicity (Ge)
- Proficy Hmiscada - Cimplicity (Ge)
- Proficy Process Systems With Cimplicity (Ge)
References
- http://support.ge-ip.com/support/index?page=kbchannel&id=KB15939
- http://www.securityfocus.com/bid/65124
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-023-01
- http://ics-cert.us-cert.gov/advisories/ICSA-14-023-01
