Approved changes feed: RSS · Atom

cpe:2.3:a:ge:intelligent_platforms_proficy_hmi\/scada_cimplicity:7.5:*:*:*:*:*:*:*

part: a version: 7.5 update: *

VendorGe (889d94a1-c6d7-5857-8fdf-da634b4dfc4f)
ProductIntelligent Platforms Proficy Hmi/Scada Cimplicity (c5d6e04f-0fb9-5763-a520-d63d6aa5e4a0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-0751 vulnerable 2026-06-08 05:05:14.170185 GE Proficy HMI/SCADA Path Traversal
The CIMPLICITY Web-based access component, CimWebServer, does not check the location of shell files being loaded into the system. By modifying the source location, an attacker could send shell code to the CimWebServer which would deploy the nefarious files as part of any SCADA project. This could allow the attacker to execute arbitrary code.
Published: 2014-01-25T22:00:00.000Z
Updated: 2025-08-22T22:51:23.718Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0750 vulnerable 2026-06-08 05:05:14.167219 GE Proficy HMI/SCADA Path Traversal
Directory traversal vulnerability in gefebt.exe in the WebView CimWeb components in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY through 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary code via a crafted HTTP request, aka ZDI-CAN-1622.
Published: 2014-01-25T22:00:00.000Z
Updated: 2025-08-22T22:52:23.571Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2823 vulnerable 2026-06-08 05:04:28.058581 Details available
The (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy DNP3 I/O driver before 7.20k, as used in DNPDrv.exe (aka the DNP master station server) in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY and iFIX, allow physically proximate attackers to cause a denial of service (infinite loop) via crafted input over a serial line.
Published: 2013-11-22T01:00:00.000Z
Updated: 2024-08-06T15:52:19.954Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2811 vulnerable 2026-06-08 05:04:28.030338 Details available
The (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy DNP3 I/O driver before 7.20k, as used in DNPDrv.exe (aka the DNP master station server) in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY and iFIX, allow remote attackers to cause a denial of service (infinite loop) via a crafted DNP3 TCP packet.
Published: 2013-11-22T01:00:00.000Z
Updated: 2024-08-06T15:52:21.430Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0654 vulnerable 2026-06-08 05:03:49.346345 Details available
CimWebServer in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary commands or cause a denial of service (daemon crash) via a crafted packet.
Published: 2013-01-27T18:00:00.000Z
Updated: 2024-09-16T19:15:02.934Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0653 vulnerable 2026-06-08 05:03:49.343676 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4689 vulnerable 2026-06-08 05:02:52.204613 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.