CVE-2013-0654

Published: Jan 27, 2013Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

CimWebServer in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary commands or cause a denial of service (daemon crash) via a crafted packet.

Affected (5)

Products: Ge: Intelligent Platforms Proficy Hmi/scada Cimplicity, Intelligent Platforms Proficy Process Systems With Cimplicity, Intelligent Platforms Proficy Process Systems

3 products

Intelligent Platforms Proficy Hmi/scada Cimplicity

Intelligent Platforms Proficy Process Systems With Cimplicity

Intelligent Platforms Proficy Process Systems

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Ge Intelligent Platforms Proficy Hmi/scada Cimplicity	Version 4.01
Ge Intelligent Platforms Proficy Hmi/scada Cimplicity	Version 7.5
Ge Intelligent Platforms Proficy Hmi/scada Cimplicity	Version 8.0

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Ge Intelligent Platforms Proficy Process Systems With Cimplicity	All versions
Ge Intelligent Platforms Proficy Process Systems	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

http://www.us-cert.gov/control_systems/pdf/ICSA-13-022-02.pdf

Source: ics-cert@hq.dhs.gov

US Government Resource

http://www.us-cert.gov/control_systems/pdf/ICSA-13-022-02.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

Timeline

No history available yet.