CVE-2014-0750

HIGH 7.5CVE-2014-0750 · Published 25/01/2014 · updated 17/06/2026

Package	Affected versions	Patched versions
intelligent platforms proficy hmi%2fscada cimplicity ge	`≤ 8.2`	No fix yet
intelligent platforms proficy hmi/scada cimplicity ge	`= 4.01= 7.5= 8.0= 8.1= 8.2`	No fix yet

Description

Directory traversal vulnerability in gefebt.exe in the WebView CimWeb components in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY through 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary code via a crafted HTTP request, aka ZDI-CAN-1622.

References

support.ge-ip.com/support/index · Vendor Advisory
securityfocus.com/bid/65124
cisa.gov/news-events/ics-advisories/icsa-14-023-01
ics-cert.us-cert.gov/advisories/ICSA-14-023-01 · US Government Resource

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free