CVE-2014-0750
highPriorität · beachten · 64EPSS 0.698 · 99. PerzentilExploit · waffenfähigEUUSEPSS · bewertet 2026-10-28
Directory traversal vulnerability in gefebt.exe in the WebView CimWeb components in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY through 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary code via a crafted HTTP request, aka ZDI-CAN-1622.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.
- MitigationProficy HMI/SCADA - CIMPLICITYcisa_csaf_ot
GE has produced an update that mitigates one vulnerability and made configuration changes to mitigate the other
- MitigationProficy Process Systems with CIMPLICITYcisa_csaf_ot
GE has produced an update that mitigates one vulnerability and made configuration changes to mitigate the other
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
Exploits (2)
Öffentlicher Proof-of-Concept- und Exploit-Code.
- EDB-31987GE Proficy CIMPLICITY - 'gefebt.exe' Remote Code Execution (Metasploit)funktional · exploit_db
betroffene Produkte (13)
Betroffene Produkte und Versionsbereiche.
- ge intelligent platforms proficy hmi%2fscada cimplicity≤ 8.2nvdUScpe:2.3:a:ge:intelligent_platforms_proficy_hmi\%2fscada_cimplicity:*:*:*:*:*:*:*:*
- ge intelligent platforms proficy hmi/scada cimplicity= 4.01nvdUScpe:2.3:a:ge:intelligent_platforms_proficy_hmi\/scada_cimplicity:*:*:*:*:*:*:*:*
- ge intelligent platforms proficy hmi/scada cimplicity= 7.5nvdUScpe:2.3:a:ge:intelligent_platforms_proficy_hmi\/scada_cimplicity:*:*:*:*:*:*:*:*
- ge intelligent platforms proficy hmi/scada cimplicity= 8.0nvdUScpe:2.3:a:ge:intelligent_platforms_proficy_hmi\/scada_cimplicity:*:*:*:*:*:*:*:*
- ge intelligent platforms proficy hmi/scada cimplicity= 8.1nvdUScpe:2.3:a:ge:intelligent_platforms_proficy_hmi\/scada_cimplicity:*:*:*:*:*:*:*:*
- ge intelligent platforms proficy hmi/scada cimplicity= 8.2nvdUScpe:2.3:a:ge:intelligent_platforms_proficy_hmi\/scada_cimplicity:*:*:*:*:*:*:*:*
- ge intelligent platforms proficy process systems with cimplicityalle VersionennvdUScpe:2.3:a:ge:intelligent_platforms_proficy_process_systems_with_cimplicity:*:*:*:*:*:*:*:*
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- ICSA-14-023-01GE Proficy Vulnerabilities2014-10-26icsa · cisa_csaf_otUS
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (12)
Externe Belege — Patches, Meldungen, Analysen.
- http://ics-cert.us-cert.gov/advisories/ICSA-14-023-01cnnvd
- http://support.ge-ip.com/support/index?page=kbchannel&id=KB15939cnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2014-0750cnnvd
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-023-01cnnvd
- https://www.securityfocus.com/bid/65124cnnvd
- http://support.ge-ip.com/support/index?page=kbchannel&id=KB15939enisa_euvd
- http://www.securityfocus.com/bid/65124enisa_euvd
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-023-01enisa_euvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan