GE Proficy HMI/SCADA CIMPLICITY WebView Improper Input Validation
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2013-2785US | high9.3 | — | ||
Multiple buffer overflows in CimWebServer.exe in the WebView component in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY before 8.0 SIM 27, 8.1 before SIM 25, and 8.2 befo… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-13-170-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-13-170-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (2)
- MitigationProficy HMI/SCADA – CIMPLICITY
GE has released the following product updates that resolve this vulnerability: Proficy HMI/SCADA – CIMPLICITY 8.2 SIM 19, Proficy HMI/SCADA – CIMPLICITY 8.1 SIM 25, Proficy HMI/SCADA – CIMPLICITY 8.0 SIM 27
- MitigationProficy Process Systems with CIMPLICITY
GE has released the following product updates that resolve this vulnerability: Proficy HMI/SCADA – CIMPLICITY 8.2 SIM 19, Proficy HMI/SCADA – CIMPLICITY 8.1 SIM 25, Proficy HMI/SCADA – CIMPLICITY 8.0 SIM 27
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan