GE Proficy HMI/SCADA CIMPLICITY CimView Memory Access Violation
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2014-2355US | medium6.9 | — | ||
The (1) CimView and (2) CimEdit components in GE Proficy HMI/SCADA-CIMPLICITY 8.2 and earlier allow remote attackers to gain privileges via a crafted CIMPLICITY screen (aka .CIM) f… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-14-289-02 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-14-289-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (1)
- MitigationProficy HMI/SCADA–CIMPLICITY
In cases where upgrading is not feasible, GE advises asset owners using CIMPLICITY versions prior to 8.1 to consider using the following recommendations that may mitigate or eliminate the impact of the vulnerability: Take steps to properly secure and protect stored CIMPLICITY screen files (.CIM). Avoid using .CIM files received from unknown sources. Avoid sending unprotected .CIM files over unencrypted networks or public Internet. Consider using a strong hashing algorithm to validate integrity of created .CIM files and ensure they have not been tampered with over time.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan