NVD

Id
29612  
Name
CVE-2014-0750  
Description
Directory traversal vulnerability in gefebt.exe in the WebView CimWeb components in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY through 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary code via a crafted HTTP request, aka ZDI-CAN-1622.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-01-25  
Modified Date
2014-02-21  
Seq
2014-0750  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
156738 29612 CVE-2014-0750 http://ics-cert.us-cert.gov/advisories/ICSA-14-023-01  View
156739 29612 CVE-2014-0750 http://support.ge-ip.com/support/index?page=kbchannel&id=KB15939  View
156740 29612 CVE-2014-0750 65124  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12382 JVNDB-2014-001257 GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY および Proficy Process Systems with CIMPLICITY におけるディレクトリトラバーサルの脆弱性 GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY および Proficy Process Systems with CIMPLICITY の WebView CimWeb コンポーネントの gefebt.exe には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2014-0750 68151 CVE-2014-0750 29612 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001257.html 2014-01-21 2014-01-28 View