CVE-2014-0750: vulnerability in GE Proficy HMI/SCADA - CIMPLICITY
GE Proficy HMI/SCADA Path Traversal
Published · Updated
Follow this CVE+ Monitor Proficy HMI/SCADA - CIMPLICITY+ Monitor Proficy Process Systems with CIMPLICITY
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
68Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendcvss 7.5epss 70%
from disclosure to weapon34 days
Published on NVDJan 25
1st PoC+34d
metasploitJan 23
Directory traversal vulnerability in gefebt.exe in the WebView CimWeb components in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY through 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary code via a crafted HTTP request, aka ZDI-CAN-1622.
AV:N/AC:L/Au:N/C:P/I:P/A:P
public PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/31987⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — GE Proficy HMI/SCADA - CIMPLICITY
In the same product, most dangerous first.