PT-2008-1822 · Ge Fanuc · Ge Fanuc Cimplicity Hmi Scada

Eyal Udassin · Published 2008-01-29 · Updated 2018-10-15 · CVE-2008-0176

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GE Fanuc CIMPLICITY HMI SCADA system versions prior to 7.0 SIM 9 GE Fanuc CIMPLICITY HMI SCADA system versions prior to 6.1 SP6 Hot fix - 010708 162517 6106

Description The issue is related to a heap-based buffer overflow in the w32rtr.exe component. This allows remote attackers to execute arbitrary code via unknown vectors.

Recommendations For GE Fanuc CIMPLICITY HMI SCADA system versions prior to 7.0 SIM 9, update to version 7.0 SIM 9 or later. For GE Fanuc CIMPLICITY HMI SCADA system versions prior to 6.1 SP6 Hot fix - 010708 162517 6106, apply Hot fix - 010708 162517 6106 or later.

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-0176

Affected Products

Ge Fanuc Cimplicity Hmi Scada

References · 11

• http://secunia.com/advisories/28663 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-0176 · Security Note
• http://securityfocus.com/archive/1/487076/100/0/threaded · Note
• http://securityfocus.com/archive/1/487241/100/0/threaded · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0176 · Note
• http://securityfocus.com/bid/27447 · Note
• http://securityreason.com/securityalert/3592 · Note
• http://kb.cert.org/vuls/id/308556 · Note
• http://support.gefanuc.com/support/index?page=kbchannel&id=KB12458 · Note
• http://vupen.com/english/advisories/2008/0306 · Note
• http://securitytracker.com/id?1019275 · Note