CVE-2014-0750

Published: Jan 25, 2014Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Directory traversal vulnerability in gefebt.exe in the WebView CimWeb components in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY through 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary code via a crafted HTTP request, aka ZDI-CAN-1622.

Affected (7)

Products: Ge: Intelligent Platforms Proficy Hmi%2fscada Cimplicity, Intelligent Platforms Proficy Hmi/scada Cimplicity, Intelligent Platforms Proficy Process Systems With Cimplicity

3 products

Intelligent Platforms Proficy Hmi%2fscada Cimplicity

Intelligent Platforms Proficy Hmi/scada Cimplicity

Intelligent Platforms Proficy Process Systems With Cimplicity

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Ge Intelligent Platforms Proficy Hmi%2fscada Cimplicity	Up to 8.2
Ge Intelligent Platforms Proficy Hmi/scada Cimplicity	Version 4.01
Ge Intelligent Platforms Proficy Hmi/scada Cimplicity	Version 7.5
Ge Intelligent Platforms Proficy Hmi/scada Cimplicity	Version 8.0
Ge Intelligent Platforms Proficy Hmi/scada Cimplicity	Version 8.1
Ge Intelligent Platforms Proficy Hmi/scada Cimplicity	Version 8.2
Ge Intelligent Platforms Proficy Process Systems With Cimplicity	All versions