CVE-2016-5787: Medium severity ge proficy cimplicity vulnerability
Published Jul 15, 2016
·Updated
General Electric (GE) Digital Proficy HMI/SCADA - CIMPLICITY before 8.2 SIM 27 mishandles service DACLs, which allows local users to modify a service configuration via unspecified vectors.
Affected Software
27 affected components
GE CIMPLICITY<8.2
GE CIMPLICITY=8.2-sim1
GE CIMPLICITY=8.2-sim10
GE CIMPLICITY=8.2-sim11
GE CIMPLICITY=8.2-sim12
GE CIMPLICITY=8.2-sim13
GE CIMPLICITY=8.2-sim14
GE CIMPLICITY=8.2-sim15
GE CIMPLICITY=8.2-sim16
GE CIMPLICITY=8.2-sim17
GE CIMPLICITY=8.2-sim18
GE CIMPLICITY=8.2-sim19
GE CIMPLICITY=8.2-sim2
GE CIMPLICITY=8.2-sim20
GE CIMPLICITY=8.2-sim21
GE CIMPLICITY=8.2-sim22
GE CIMPLICITY=8.2-sim23
GE CIMPLICITY=8.2-sim24
GE CIMPLICITY=8.2-sim25
GE CIMPLICITY=8.2-sim26
GE CIMPLICITY=8.2-sim3
GE CIMPLICITY=8.2-sim4
GE CIMPLICITY=8.2-sim5
GE CIMPLICITY=8.2-sim6
GE CIMPLICITY=8.2-sim7
GE CIMPLICITY=8.2-sim8
GE CIMPLICITY=8.2-sim9
Event History
Jul 15, 2016
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-5787?
CVE-2016-5787 is classified as a medium severity vulnerability.
2
How do I fix CVE-2016-5787?
To fix CVE-2016-5787, update GE CIMPLICITY to version 8.2 SIM 27 or later.
3
Who is affected by CVE-2016-5787?
CVE-2016-5787 affects all versions of GE CIMPLICITY prior to 8.2 SIM 27.
4
What type of vulnerability is CVE-2016-5787?
CVE-2016-5787 is a local privilege escalation vulnerability due to mishandled service DACLs.
5
How can local users exploit CVE-2016-5787?
Local users can exploit CVE-2016-5787 to modify service configurations through unspecified vectors.