Read the docs
TI-2016-05019 Aliases CVE-2016-5787GHSA-76q4-6gm8-m28c

General Electric (GE) Digital Proficy HMI/SCADA - CIMPLICITY before 8.2 SIM 27 mishandles…

Priority LOW 28CWE-668Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Low · Low · Low
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

General Electric (GE) Digital Proficy HMI/SCADA - CIMPLICITY before 8.2 SIM 27 mishandles service DACLs, which allows local users to modify a service configuration via unspecified vectors.

Why it matters now

EPSS 0.00394 33rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 27

CPEVersionsRoleVendor
cpe:2.3:a:ge:cimplicity:*:*:*:*:*:*:*:*before 8.2VulnerableGE
cpe:2.3:a:ge:cimplicity:8.2:sim1:*:*:*:*:*:*8.2 sim1VulnerableGE
cpe:2.3:a:ge:cimplicity:8.2:sim10:*:*:*:*:*:*8.2 sim10VulnerableGE
cpe:2.3:a:ge:cimplicity:8.2:sim11:*:*:*:*:*:*8.2 sim11VulnerableGE
cpe:2.3:a:ge:cimplicity:8.2:sim12:*:*:*:*:*:*8.2 sim12VulnerableGE
cpe:2.3:a:ge:cimplicity:8.2:sim13:*:*:*:*:*:*8.2 sim13VulnerableGE
cpe:2.3:a:ge:cimplicity:8.2:sim14:*:*:*:*:*:*8.2 sim14VulnerableGE
cpe:2.3:a:ge:cimplicity:8.2:sim15:*:*:*:*:*:*8.2 sim15VulnerableGE
cpe:2.3:a:ge:cimplicity:8.2:sim16:*:*:*:*:*:*8.2 sim16VulnerableGE
cpe:2.3:a:ge:cimplicity:8.2:sim17:*:*:*:*:*:*8.2 sim17VulnerableGE
  • cpe:2.3:a:ge:cimplicity:*:*:*:*:*:*:*:* Versions before 8.2 Vulnerable ·GE
  • cpe:2.3:a:ge:cimplicity:8.2:sim1:*:*:*:*:*:* Versions 8.2 sim1 Vulnerable ·GE
  • cpe:2.3:a:ge:cimplicity:8.2:sim10:*:*:*:*:*:* Versions 8.2 sim10 Vulnerable ·GE
  • cpe:2.3:a:ge:cimplicity:8.2:sim11:*:*:*:*:*:* Versions 8.2 sim11 Vulnerable ·GE
  • cpe:2.3:a:ge:cimplicity:8.2:sim12:*:*:*:*:*:* Versions 8.2 sim12 Vulnerable ·GE
  • cpe:2.3:a:ge:cimplicity:8.2:sim13:*:*:*:*:*:* Versions 8.2 sim13 Vulnerable ·GE
  • cpe:2.3:a:ge:cimplicity:8.2:sim14:*:*:*:*:*:* Versions 8.2 sim14 Vulnerable ·GE
  • cpe:2.3:a:ge:cimplicity:8.2:sim15:*:*:*:*:*:* Versions 8.2 sim15 Vulnerable ·GE
  • cpe:2.3:a:ge:cimplicity:8.2:sim16:*:*:*:*:*:* Versions 8.2 sim16 Vulnerable ·GE
  • cpe:2.3:a:ge:cimplicity:8.2:sim17:*:*:*:*:*:* Versions 8.2 sim17 Vulnerable ·GE
Show 17 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:ge:cimplicity:8.2:sim18:*:*:*:*:*:*8.2 sim18VulnerableGE
cpe:2.3:a:ge:cimplicity:8.2:sim19:*:*:*:*:*:*8.2 sim19VulnerableGE
cpe:2.3:a:ge:cimplicity:8.2:sim2:*:*:*:*:*:*8.2 sim2VulnerableGE
cpe:2.3:a:ge:cimplicity:8.2:sim20:*:*:*:*:*:*8.2 sim20VulnerableGE
cpe:2.3:a:ge:cimplicity:8.2:sim21:*:*:*:*:*:*8.2 sim21VulnerableGE
cpe:2.3:a:ge:cimplicity:8.2:sim22:*:*:*:*:*:*8.2 sim22VulnerableGE
cpe:2.3:a:ge:cimplicity:8.2:sim23:*:*:*:*:*:*8.2 sim23VulnerableGE
cpe:2.3:a:ge:cimplicity:8.2:sim24:*:*:*:*:*:*8.2 sim24VulnerableGE
cpe:2.3:a:ge:cimplicity:8.2:sim25:*:*:*:*:*:*8.2 sim25VulnerableGE
cpe:2.3:a:ge:cimplicity:8.2:sim26:*:*:*:*:*:*8.2 sim26VulnerableGE
cpe:2.3:a:ge:cimplicity:8.2:sim3:*:*:*:*:*:*8.2 sim3VulnerableGE
cpe:2.3:a:ge:cimplicity:8.2:sim4:*:*:*:*:*:*8.2 sim4VulnerableGE
cpe:2.3:a:ge:cimplicity:8.2:sim5:*:*:*:*:*:*8.2 sim5VulnerableGE
cpe:2.3:a:ge:cimplicity:8.2:sim6:*:*:*:*:*:*8.2 sim6VulnerableGE
cpe:2.3:a:ge:cimplicity:8.2:sim7:*:*:*:*:*:*8.2 sim7VulnerableGE
cpe:2.3:a:ge:cimplicity:8.2:sim8:*:*:*:*:*:*8.2 sim8VulnerableGE
cpe:2.3:a:ge:cimplicity:8.2:sim9:*:*:*:*:*:*8.2 sim9VulnerableGE
  • cpe:2.3:a:ge:cimplicity:8.2:sim18:*:*:*:*:*:* Versions 8.2 sim18 Vulnerable ·GE
  • cpe:2.3:a:ge:cimplicity:8.2:sim19:*:*:*:*:*:* Versions 8.2 sim19 Vulnerable ·GE
  • cpe:2.3:a:ge:cimplicity:8.2:sim2:*:*:*:*:*:* Versions 8.2 sim2 Vulnerable ·GE
  • cpe:2.3:a:ge:cimplicity:8.2:sim20:*:*:*:*:*:* Versions 8.2 sim20 Vulnerable ·GE
  • cpe:2.3:a:ge:cimplicity:8.2:sim21:*:*:*:*:*:* Versions 8.2 sim21 Vulnerable ·GE
  • cpe:2.3:a:ge:cimplicity:8.2:sim22:*:*:*:*:*:* Versions 8.2 sim22 Vulnerable ·GE
  • cpe:2.3:a:ge:cimplicity:8.2:sim23:*:*:*:*:*:* Versions 8.2 sim23 Vulnerable ·GE
  • cpe:2.3:a:ge:cimplicity:8.2:sim24:*:*:*:*:*:* Versions 8.2 sim24 Vulnerable ·GE
  • cpe:2.3:a:ge:cimplicity:8.2:sim25:*:*:*:*:*:* Versions 8.2 sim25 Vulnerable ·GE
  • cpe:2.3:a:ge:cimplicity:8.2:sim26:*:*:*:*:*:* Versions 8.2 sim26 Vulnerable ·GE
  • cpe:2.3:a:ge:cimplicity:8.2:sim3:*:*:*:*:*:* Versions 8.2 sim3 Vulnerable ·GE
  • cpe:2.3:a:ge:cimplicity:8.2:sim4:*:*:*:*:*:* Versions 8.2 sim4 Vulnerable ·GE
  • cpe:2.3:a:ge:cimplicity:8.2:sim5:*:*:*:*:*:* Versions 8.2 sim5 Vulnerable ·GE
  • cpe:2.3:a:ge:cimplicity:8.2:sim6:*:*:*:*:*:* Versions 8.2 sim6 Vulnerable ·GE
  • cpe:2.3:a:ge:cimplicity:8.2:sim7:*:*:*:*:*:* Versions 8.2 sim7 Vulnerable ·GE
  • cpe:2.3:a:ge:cimplicity:8.2:sim8:*:*:*:*:*:* Versions 8.2 sim8 Vulnerable ·GE
  • cpe:2.3:a:ge:cimplicity:8.2:sim9:*:*:*:*:*:* Versions 8.2 sim9 Vulnerable ·GE

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2016-5787
  2. 2026-10-03 Alias added: GHSA-76q4-6gm8-m28c

References

Advisory 2

  • TI-2022-06170 ICSA-22-053-02 GE Proficy CIMPLICITY-Cleartext CVSS 3.1CRITICAL 9.8
  • TI-2018-10924 XXE in GE Proficy Cimplicity GDS versions 9.0 R2, 9.5, 10.0 CVSS 3.0CRITICAL 9.1
  • TI-2023-03234 GE Digital CIMPLICITY Heap-based Buffer Overflow CVSS 3.1CRITICAL 9.8
  • TI-2022-02853 GE CIMPLICITY Out-of-bounds Write CVSS 3.1HIGH 7.8
  • TI-2022-02845 GE CIMPLICITY Access of Uninitialized Pointer CVSS 3.1HIGH 7.8
  • TI-2022-02729 GE CIMPLICITY Access of Uninitialized Pointer CVSS 3.1HIGH 7.8
See all 11 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences