Lucene search

K
nvd[email protected]NVD:CVE-2014-2355
HistoryJan 17, 2015 - 2:59 a.m.

CVE-2014-2355

2015-01-1702:59:00
CWE-119
web.nvd.nist.gov

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.8%

The (1) CimView and (2) CimEdit components in GE Proficy HMI/SCADA-CIMPLICITY 8.2 and earlier allow remote attackers to gain privileges via a crafted CIMPLICITY screen (aka .CIM) file.

Affected configurations

NVD
Node
geintelligent_platforms_proficy_hmi\/scada_cimplicityRange8.2

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.8%

Related for NVD:CVE-2014-2355