CVE-2014-2355

The (1) CimView and (2) CimEdit components in GE Proficy HMI/SCADA-CIMPLICITY 8.2 and earlier allow remote attackers to gain privileges via a crafted CIMPLICITY screen (aka .CIM) file.

Score

CVSS 2.0 6.9 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2015-01-17

Last modified

2025-10-03

Weaknesses

CWE-119

Affected products

• Intelligent Platforms Proficy Hmi/scada Cimplicity (Ge)
• Proficy Hmiscadacimplicity (Ge)

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-14-289-02
• https://ics-cert.us-cert.gov/advisories/ICSA-14-289-02