PT-2013-3928 · Ge Intelligent Platforms · Proficy Hmi/Scada - Cimplicity+1
Amisto0X07
+1
·
Publicado
2013-07-26
·
Atualizado
2013-07-31
·
CVE-2013-2785
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY versions prior to 8.0 SIM 27
GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY versions 8.1 prior to SIM 25
GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY versions 8.2 prior to SIM 19
Proficy Process Systems with CIMPLICITY (affected versions not specified)
Description
The issue allows remote attackers to execute arbitrary code via crafted data in packets to TCP port 10212. This is due to multiple buffer overflows in CimWebServer.exe in the WebView component.
Recommendations
For GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY versions prior to 8.0 SIM 27, update to version 8.0 SIM 27 or later.
For GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY versions 8.1 prior to SIM 25, update to version 8.1 SIM 25 or later.
For GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY versions 8.2 prior to SIM 19, update to version 8.2 SIM 19 or later.
For Proficy Process Systems with CIMPLICITY, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
RCE
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Proficy Hmi/Scada - Cimplicity
Proficy Process Systems