CVE-2014-0750CWE-22

GE Proficy HMI/SCADA Path Traversal

High · published January 25, 2014

Patch now

High probability of exploitation

CVSS calls it high at 7.5. It sits in the 99.4th percentile for exploit probability.

CVSS v2.0

7.5

EPSS

70%

Percentile

99.4

In the wild

Unconfirmed

What it is

Directory traversal vulnerability in gefebt.exe in the WebView CimWeb components in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY through 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary code via a crafted HTTP request, aka ZDI-CAN-1622.

The record

Technical detail

CVSS v2.0: 7.5 · HIGH
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS v4.0: Not supplied
EPSS: 0.69830 · 99.4th percentile
Weakness: CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published: 2014-01-25T22:00Z

EPSS history

Timeline

25 JAN 22:00Z
GE Proficy HMI/SCADA Path Traversal
cvelistv5