PT-2013-3928 · Ge Intelligent Platforms · Proficy Hmi/Scada - Cimplicity+1

Amisto0X07 + 1 · Published 2013-07-26 · Updated 2013-07-31 · CVE-2013-2785

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY versions prior to 8.0 SIM 27 GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY versions 8.1 prior to SIM 25 GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY versions 8.2 prior to SIM 19 Proficy Process Systems with CIMPLICITY (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary code via crafted data in packets to TCP port 10212. This is due to multiple buffer overflows in CimWebServer.exe in the WebView component.

Recommendations For GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY versions prior to 8.0 SIM 27, update to version 8.0 SIM 27 or later. For GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY versions 8.1 prior to SIM 25, update to version 8.1 SIM 25 or later. For GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY versions 8.2 prior to SIM 19, update to version 8.2 SIM 19 or later. For Proficy Process Systems with CIMPLICITY, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2013-2785

ZDI-13-180

ZDI-13-181

Affected Products

Proficy Hmi/Scada - Cimplicity

Proficy Process Systems

References · 6

• https://zerodayinitiative.com/advisories/ZDI-13-180 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2013-2785 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-13-181 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2785 · Note
• http://support.ge-ip.com/support/index?page=kbchannel&id=KB15602 · Note
• http://ics-cert.us-cert.gov/advisories/ICSA-13-170-01 · Note