PT-2016-6679 · General Electric (Ge) Digital Proficy Hmi/Scada · Cimplicity

Zhou Yu · Publicado 2016-07-15 · Atualizado 2022-02-03 · CVE-2016-5787

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions General Electric (GE) Digital Proficy HMI/SCADA - CIMPLICITY versions prior to 8.2 SIM 27

Description The issue is related to the mishandling of service DACLs, which allows local users to modify a service configuration. This can be achieved via unspecified vectors.

Recommendations For versions prior to 8.2 SIM 27, update to version 8.2 SIM 27 or later to resolve the issue.

Correção

Exposure of Resource to Wrong Sphere

Enumeração de Fraquezas

CWE-668

Identificadores relacionados

CVE-2016-5787

Produtos afetados

Cimplicity

Referências · 5

• http://securityfocus.com/bid/91727 · Nota
• https://osv.dev/vulnerability/CVE-2016-5787 · Aviso do Fabricante
• https://ics-cert.us-cert.gov/advisories/ICSA-16-194-02 · Nota
• https://ge-ip.force.com/communities/en_US/Article/GE-Digital-Security-Advisory-GED-16-01 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-5787 · Nota de Segurança