Directory traversal

2014-01-2522:55:00

PRIOn knowledge base

www.prio-n.com

8.1 High

AI Score

Confidence

Low

0.414 Medium

EPSS

Percentile

97.3%

JSON

Directory traversal vulnerability in CimWebServer.exe (aka the WebView component) in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY before 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary code via a crafted message to TCP port 10212, aka ZDI-CAN-1623.

CPENameOperatorVersion
intelligent_platforms_proficy_hmi\\%2fscada_cimplicityle8.2
intelligent_platforms_proficy_hmi\\/scada_cimplicityeq8.0
intelligent_platforms_proficy_hmi\\/scada_cimplicityeq8.1
intelligent_platforms_proficy_hmi\\/scada_cimplicityeq4.01
intelligent_platforms_proficy_hmi\\/scada_cimplicityeq8.2
intelligent_platforms_proficy_hmi\\/scada_cimplicityeq7.5

Name	Operator	Version
intelligent_platforms_proficy_hmi\\%2fscada_cimplicity	le	8.2
intelligent_platforms_proficy_hmi\\/scada_cimplicity	eq	8.0
intelligent_platforms_proficy_hmi\\/scada_cimplicity	eq	8.1
intelligent_platforms_proficy_hmi\\/scada_cimplicity	eq	4.01
intelligent_platforms_proficy_hmi\\/scada_cimplicity	eq	8.2
intelligent_platforms_proficy_hmi\\/scada_cimplicity	eq	7.5