CVEvulnerability
CVE-2013-0654
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-01-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
CimWebServer in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary commands or cause a denial of service (daemon crash) via a crafted packet.
Affected configurations
• ge intelligent platforms proficy hmi\/scada cimplicity 4.01
• ge intelligent platforms proficy hmi\/scada cimplicity 7.5
• ge intelligent platforms proficy hmi\/scada cimplicity 8.0
• ge intelligent platforms proficy process systems with cimplicity
• ge intelligent platforms proficy process systems
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://www.us-cert.gov/control_systems/pdf/ICSA-13-022-02.pdf US Government Resource
- http://www.us-cert.gov/control_systems/pdf/ICSA-13-022-02.pdf US Government Resource