Where
-Infinity
0

Trending

Last week
Last month
Last year

GE Intelligent Platforms Proficy Hmi\/scada CimplicityBuffer Overflow

Risk 79
Severity
9.3
Buffer Overflow
AV:N/AC:M/Au:N/C:C/I:C/A:C

Multiple buffer overflows in CimWebServer.exe in the WebView component in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY before 8.0 SIM 27, 8.1 before SIM 25, and 8.2 before SIM 19, and Proficy Process Systems with CIMPLICITY, allow remote attackers to execute arbitrary code via crafted data in packets to TCP port 10212, aka ZDI-CAN-1621 and ZDI-CAN-1624.

First published (updated )
CVE-2013-2785

GE Intelligent Platforms Proficy Hmi\/scada CimplicityGE Proficy HMI/SCADA CIMPLICITY CimView

Risk 59
Severity
6.9
Buffer Overflow
AV:L/AC:M/Au:N/C:C/I:C/A:C

The (1) CimView and (2) CimEdit components in GE Proficy HMI/SCADA-CIMPLICITY 8.2 and earlier allow remote attackers to gain privileges via a crafted CIMPLICITY screen (aka .CIM) file.

Remedy

GE recommends that asset owners apply product updates to Proficy HMI/SCADA–CIMPLICITY Versions 8.1 and 8.2. The following product updates address the memory access violation vulnerability: Proficy HMI/SCADA – CIMPLICITY 8.1 SIM 29 (DN4219) available at:  http://support.ge-ip.com/support/index?page=dwchannel&id=DN4219 Proficy HMI/SCADA–CIMPLICITY 8.2 SIM 26 (DN4197) available at:  http://support.ge-ip.com/support/index?page=dwchannel&id=DN4197
First published (updated )
CVE-2014-2355

GE Intelligent Platforms Proficy Hmi\/scada CimplicityPath Traversal

Risk 22
Severity
4.3
Path Traversal
AV:N/AC:M/Au:N/C:P/I:N/A:N

Directory traversal vulnerability in substitute.bcl in the WebView CimWeb subsystem in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPLICITY, allows remote attackers to read arbitrary files via a crafted packet.

First published (updated )
CVE-2013-0653

ICSA-22-053-02 GE Proficy CIMPLICITY-Cleartext

Risk 87
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

The affected product is vulnerable due to cleartext transmission of credentials seen in the CIMPLICITY network, which can be easily spoofed and used to log in to make operational changes to the system.

Remedy

Users are advised to refer to the Secure Deployment Guide on how to configure communication encryption. Users are encouraged to review the CIMPLICITY Windows Hardening Guide and Recommendations for further IPSEC configuration guidance found in the section titled “Appendix A IPSEC Configuration.” Users are encouraged to contact a GE representative to obtain the latest versions of CIMPLICITY.
First published (updated )
CVE-2022-21798

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203