Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2014-0751

The CIMPLICITY Web-based access component, CimWebServer, does not check the location of shell files being loaded into the system. By modifying the source location, an attacker could send shell code to the CimWebServer which would deploy the nefarious files as part of any SCADA project. This could allow the attacker to execute arbitrary code.

Published

2014-01-25T22:55:04.583

Last Modified

2025-08-22T23:15:30.233

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 6.8 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

8.6

Impact Score

6.4

Weaknesses
  • Type: Secondary
    CWE-22
  • Type: Secondary
    CWE-22
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application ge intelligent_platforms_proficy_hmi\%2fscada_cimplicity ≤ 8.2 Yes
Application ge intelligent_platforms_proficy_hmi\/scada_cimplicity 4.01 Yes
Application ge intelligent_platforms_proficy_hmi\/scada_cimplicity 7.5 Yes
Application ge intelligent_platforms_proficy_hmi\/scada_cimplicity 8.0 Yes
Application ge intelligent_platforms_proficy_hmi\/scada_cimplicity 8.1 Yes
Application ge intelligent_platforms_proficy_hmi\/scada_cimplicity 8.2 Yes
Application ge intelligent_platforms_proficy_process_systems_with_cimplicity - Yes
References