Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

10 records

Vendor: GE Component: Intelligent Platforms Proficy Hmi/scada Cimplicity Clear all filters
TI-2017-09437 CVE-2017-12732 · GHSA-cm9j-xv24-c3gf

Stack-based buffer overflow in GE CIMPLICITY

Priority LOW 31

A Stack-based Buffer Overflow issue was discovered in GE CIMPLICITY Versions 9.0 and prior.

CVSS 3.0MEDIUM 6.8 Adjacent network Low privileges User interaction EPSS 0.0075 Published 2017-10-05 No fix listed CWE-121
TI-2014-01870 CVE-2014-2355 · GHSA-rhgq-mf3j-hc7r

GE Proficy HMI/SCADA CIMPLICITY CimView

Priority LOW 31

The (1) CimView and (2) CimEdit components in GE Proficy HMI/SCADA-CIMPLICITY 8.2 and earlier allow remote attackers to gain privileges via a crafted CIMPLICITY screen (aka .CIM) file.

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00645 Published 2015-01-17 No fix listed CWE-119
TI-2014-00700 CVE-2014-0751 · GHSA-5q8q-px6g-7r9f

GE Proficy HMI/SCADA Path Traversal

Priority LOW 38

The CIMPLICITY Web-based access component, CimWebServer, does not check the location of shell files being loaded into the system.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03075 Published 2014-01-25 Fixed in 8.2 CWE-22
TI-2014-00699 CVE-2014-0750 · GHSA-32h5-mfcc-v69p

GE Proficy HMI/SCADA Path Traversal

Priority HIGH 70

Directory traversal vulnerability in gefebt.exe in the WebView CimWeb components in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY through 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote a…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.6983 Published 2014-01-25 Fixed in 8.2 CWE-22
TI-2013-02433 CVE-2013-2785 · GHSA-rrxc-8qxg-r958

Multiple buffer overflows in CimWebServer.exe in the WebView component in GE Intelligent…

Priority MEDIUM 47

Multiple buffer overflows in CimWebServer.exe in the WebView component in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY before 8.0 SIM 27, 8.1 before SIM 25, and 8.2 before SIM 19, and Proficy Process Systems w…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03769 Published 2013-07-31 No fix listed CWE-119
TI-2013-00547 CVE-2013-0654 · GHSA-2j48-mrqm-r4w9

CimWebServer in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0…

Priority MEDIUM 46

CimWebServer in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary commands or cause a denial of service (d…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0306 Published 2013-01-27 No fix listed CWE-20
TI-2013-00546 CVE-2013-0653 · GHSA-3crv-g23g-rwc9

Directory traversal vulnerability in substitute.bcl in the WebView CimWeb subsystem in GE…

Priority LOW 38

Directory traversal vulnerability in substitute.bcl in the WebView CimWeb subsystem in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPLICITY, allows remote…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.19111 Published 2013-01-27 No fix listed CWE-22
TI-2012-03997 CVE-2012-4689 · GHSA-xv32-q7h7-g7hp

Integer overflow in CimWebServer.exe in GE Intelligent Platforms Proficy HMI/SCADA…

Priority LOW 22

Integer overflow in CimWebServer.exe in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPLICITY, allows remote attackers to cause a denial of service (daemon…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01151 Published 2013-01-17 No fix listed CWE-189