Read the docs

GE

Records129All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical51CVSS 9.0–10.0
CVSS high44CVSS 7.0–8.9

Exploited now

GE records in CISA KEV

No GE vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

10 records in Intelligent Platforms Proficy Hmi/scada Cimplicity · all components

TI-2014-00699 CVE-2014-0750 · GHSA-32h5-mfcc-v69p

GE Proficy HMI/SCADA Path Traversal

Priority HIGH 70

Directory traversal vulnerability in gefebt.exe in the WebView CimWeb components in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY through 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote a…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.6983 Published 2014-01-25 Fixed in 8.2 CWE-22
Priority MEDIUM 47

Multiple buffer overflows in CimWebServer.exe in the WebView component in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY before 8.0 SIM 27, 8.1 before SIM 25, and 8.2 before SIM 19, and Proficy Process Systems w…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03769 Published 2013-07-31 No fix listed CWE-119
Priority MEDIUM 46

CimWebServer in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary commands or cause a denial of service (d…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0306 Published 2013-01-27 No fix listed CWE-20
TI-2014-00700 CVE-2014-0751 · GHSA-5q8q-px6g-7r9f

GE Proficy HMI/SCADA Path Traversal

Priority LOW 38

The CIMPLICITY Web-based access component, CimWebServer, does not check the location of shell files being loaded into the system.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03075 Published 2014-01-25 Fixed in 8.2 CWE-22
Priority LOW 38

Directory traversal vulnerability in substitute.bcl in the WebView CimWeb subsystem in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPLICITY, allows remote…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.19111 Published 2013-01-27 No fix listed CWE-22
TI-2017-09437 CVE-2017-12732 · GHSA-cm9j-xv24-c3gf

Stack-based buffer overflow in GE CIMPLICITY

Priority LOW 31

A Stack-based Buffer Overflow issue was discovered in GE CIMPLICITY Versions 9.0 and prior.

CVSS 3.0MEDIUM 6.8 Adjacent network Low privileges User interaction EPSS 0.0075 Published 2017-10-05 No fix listed CWE-121
TI-2014-01870 CVE-2014-2355 · GHSA-rhgq-mf3j-hc7r

GE Proficy HMI/SCADA CIMPLICITY CimView

Priority LOW 31

The (1) CimView and (2) CimEdit components in GE Proficy HMI/SCADA-CIMPLICITY 8.2 and earlier allow remote attackers to gain privileges via a crafted CIMPLICITY screen (aka .CIM) file.

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00645 Published 2015-01-17 No fix listed CWE-119
Priority LOW 22

Integer overflow in CimWebServer.exe in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPLICITY, allows remote attackers to cause a denial of service (daemon…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01151 Published 2013-01-17 No fix listed CWE-189
Open these records in search →