CVE-2016-5787

General Electric (GE) Digital Proficy HMI/SCADA - CIMPLICITY before 8.2 SIM 27 mishandles service DACLs, which allows local users to modify a service configuration via unspecified vectors.

Score

CVSS 3.1 6.3 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2016-07-15

Last modified

2024-08-06

Weaknesses

CWE-668

Affected products

• Cimplicity (Ge)

References

• http://www.securityfocus.com/bid/91727
• https://ge-ip.force.com/communities/en_US/Article/GE-Digital-Security-Advisory-GED-16-01
• https://ics-cert.us-cert.gov/advisories/ICSA-16-194-02