CVE-2014-0751: GE Proficy HMI/SCADA Path Traversal
Directory traversal vulnerability in CimWebServer.exe (aka the WebView component) in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY before 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary code via a crafted message to TCP port 10212, aka ZDI-CAN-1623.
Other sources
The CIMPLICITY Web-based access component, CimWebServer, does not check the location of shell files being loaded into the system. By modifying the source location, an attacker could send shell code to the CimWebServer which would deploy the nefarious files as part of any SCADA project. This could allow the attacker to execute arbitrary code.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY (CimWebServer/WebView)to a version that resolves this vulnerability.Fixed in 8.2 SIM 24 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch GEIP13-05 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch GEIP13-06 - Remove
Remove
gefebt.exe filesfrom your environment.Delete or move all copies of the gefebt.exe files that are accessible from a Web client so they are inaccessible to remote attackers.
- Compensating control
Follow the referenced GE Product Security Advisories (KB15940 and KB15939) for additional server Web configuration changes to mitigate the other vulnerability and ensure the CimWebServer/CIMPLICITY Web-based access component does not load shell files from attacker-controlled locations.
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0751?
CVE-2014-0751 is classified as a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2014-0751?
To mitigate CVE-2014-0751, upgrade to versions of GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY that are patched or newer than 8.2 SIM 24.
What systems are affected by CVE-2014-0751?
CVE-2014-0751 affects multiple versions of GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY and Proficy Process Systems.
What is a directory traversal vulnerability in the context of CVE-2014-0751?
In CVE-2014-0751, a directory traversal vulnerability allows attackers to access files and execute arbitrary code on the server by sending crafted messages.
Can CVE-2014-0751 be exploited remotely?
Yes, CVE-2014-0751 can be exploited remotely, allowing attackers to compromise affected systems via TCP port 10212.