ICSA-13-170-01

icsaUScisa_csaf_ot

GE Proficy HMI/SCADA CIMPLICITY WebView Improper Input Validation

Advisory ansehen veröffentlicht 2013-03-22

This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2013-2785UShigh9.3—
Multiple buffer overflows in CimWebServer.exe in the WebView component in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY before 8.0 SIM 27, 8.1 before SIM 25, and 8.2 befo…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (2)

  • MitigationProficy HMI/SCADA – CIMPLICITY

    GE has released the following product updates that resolve this vulnerability: Proficy HMI/SCADA – CIMPLICITY 8.2 SIM 19, Proficy HMI/SCADA – CIMPLICITY 8.1 SIM 25, Proficy HMI/SCADA – CIMPLICITY 8.0 SIM 27

  • MitigationProficy Process Systems with CIMPLICITY

    GE has released the following product updates that resolve this vulnerability: Proficy HMI/SCADA – CIMPLICITY 8.2 SIM 19, Proficy HMI/SCADA – CIMPLICITY 8.1 SIM 25, Proficy HMI/SCADA – CIMPLICITY 8.0 SIM 27

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan