GE Proficy HMI/SCADA - CIMPLICITY Multiple Remote Code Execution Vulnerabilities

Bugtraq ID:	64599
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 19 2013 12:00AM
Updated:	Dec 19 2013 12:00AM
Credit:	ZombiE and amisto0x07
Vulnerable:	General Electric Proficy HMI/SCADA - CIMPLICITY 4.01
Not Vulnerable:	General Electric Proficy HMI/SCADA - CIMPLICITY 4.0

GE Proficy HMI/SCADA - CIMPLICITY Multiple Remote Code Execution Vulnerabilities

GE Proficy HMI/SCADA - CIMPLICITY is prone to multiple remote code-execution vulnerabilities.

An attacker can exploit these issues to cause the application to crash or execute arbitrary code in the context of the affected application.

GE Proficy HMI/SCADA - CIMPLICITY Multiple Remote Code Execution Vulnerabilities

References:

• GEIP13-05 Security Advisory - Proficy CIMPLICITY gefebt Remote Code Exec (GE)
  
• GEIP13-06 Security Advisory Proficy CIMPLICITY WebView Remote Code Exec (GE)
  
• General electric HomePage (General electric)