PT-2016-6679 · General Electric (Ge) Digital Proficy Hmi/Scada · Cimplicity

Zhou Yu · Published 2016-07-15 · Updated 2022-02-03 · CVE-2016-5787

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions General Electric (GE) Digital Proficy HMI/SCADA - CIMPLICITY versions prior to 8.2 SIM 27

Description The issue is related to the mishandling of service DACLs, which allows local users to modify a service configuration. This can be achieved via unspecified vectors.

Recommendations For versions prior to 8.2 SIM 27, update to version 8.2 SIM 27 or later to resolve the issue.

Fix

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

Related Identifiers

CVE-2016-5787

Affected Products

Cimplicity

References · 5

• https://osv.dev/vulnerability/CVE-2016-5787 · Vendor Advisory
• https://ge-ip.force.com/communities/en_US/Article/GE-Digital-Security-Advisory-GED-16-01 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-5787 · Security Note
• http://securityfocus.com/bid/91727 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-16-194-02 · Note