Directory traversal

2014-01-2522:55:00

PRIOn knowledge base

www.prio-n.com

8.1 High

AI Score

Confidence

Low

0.387 Low

EPSS

Percentile

97.3%

JSON

Directory traversal vulnerability in gefebt.exe in the WebView CimWeb components in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY through 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary code via a crafted HTTP request, aka ZDI-CAN-1622.

CPENameOperatorVersion
intelligent_platforms_proficy_hmi\\%2fscada_cimplicityle8.2
intelligent_platforms_proficy_hmi\\/scada_cimplicityeq8.0
intelligent_platforms_proficy_hmi\\/scada_cimplicityeq8.1
intelligent_platforms_proficy_hmi\\/scada_cimplicityeq4.01
intelligent_platforms_proficy_hmi\\/scada_cimplicityeq8.2
intelligent_platforms_proficy_hmi\\/scada_cimplicityeq7.5

Name	Operator	Version
intelligent_platforms_proficy_hmi\\%2fscada_cimplicity	le	8.2
intelligent_platforms_proficy_hmi\\/scada_cimplicity	eq	8.0
intelligent_platforms_proficy_hmi\\/scada_cimplicity	eq	8.1
intelligent_platforms_proficy_hmi\\/scada_cimplicity	eq	4.01
intelligent_platforms_proficy_hmi\\/scada_cimplicity	eq	8.2
intelligent_platforms_proficy_hmi\\/scada_cimplicity	eq	7.5