Code injection

2015-01-1702:59:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.8%

JSON

The (1) CimView and (2) CimEdit components in GE Proficy HMI/SCADA-CIMPLICITY 8.2 and earlier allow remote attackers to gain privileges via a crafted CIMPLICITY screen (aka .CIM) file.

CPENameOperatorVersion
intelligent_platforms_proficy_hmi\\/scada_cimplicityle8.2

CPE	Name	Operator	Version
	intelligent_platforms_proficy_hmi\\/scada_cimplicity	le	8.2

References

ics-cert.us-cert.gov/advisories/ICSA-14-289-02