PT-2014-3813
CVE-2014-0750
·
تاريخ النشر
2014-01-25
·
تاريخ التحديث
2014-02-21
الوصف من
CVSS 2.0
7.5
عاليةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY versions prior to 8.2 SIM 24
Proficy Process Systems with CIMPLICITY (affected versions not specified)
Description
The issue allows remote attackers to execute arbitrary code via a crafted HTTP request. This is related to a directory traversal vulnerability in the gefebt.exe component of the WebView CimWeb components.
Recommendations
For GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY versions prior to 8.2 SIM 24, update to version 8.2 SIM 24 or later to resolve the issue.
For Proficy Process Systems with CIMPLICITY, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾