CVE-2014-0750

高危 7.5CVE-2014-0750 · Published 25/01/2014 · updated 17/06/2026

要点

CVE-2014-0750 是影响 intelligent platforms proficy hmi%2fscada cimplicity (ge), intelligent platforms proficy hmi/scada cimplicity (ge) 的高危 (CVSS 7.5)漏洞。
未来 30 天内被利用的概率（EPSS）：69.8%，高于 99.4% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
intelligent platforms proficy hmi%2fscada cimplicity ge	`≤ 8.2`	No fix yet
intelligent platforms proficy hmi/scada cimplicity ge	`= 4.01= 7.5= 8.0= 8.1= 8.2`	No fix yet

Description

Directory traversal vulnerability in gefebt.exe in the WebView CimWeb components in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY through 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary code via a crafted HTTP request, aka ZDI-CAN-1622.

References

support.ge-ip.com/support/index · Vendor Advisory
securityfocus.com/bid/65124
cisa.gov/news-events/ics-advisories/icsa-14-023-01
ics-cert.us-cert.gov/advisories/ICSA-14-023-01 · US Government Resource

intelligent platforms proficy hmi%2fscada cimplicity 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free