CVE-2013-0654

Опубликовано: 27 янв. 2013

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

CimWebServer in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary commands or cause a denial of service (daemon crash) via a crafted packet.

Ссылки

http://www.us-cert.gov/control_systems/pdf/ICSA-13-022-02.pdf
US Government Resource
http://www.us-cert.gov/control_systems/pdf/ICSA-13-022-02.pdf
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ge:intelligent_platforms_proficy_hmi\/scada_cimplicity:4.01:*:*:*:*:*:*:*

cpe:2.3:a:ge:intelligent_platforms_proficy_hmi\/scada_cimplicity:7.5:*:*:*:*:*:*:*

cpe:2.3:a:ge:intelligent_platforms_proficy_hmi\/scada_cimplicity:8.0:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:a:ge:intelligent_platforms_proficy_process_systems_with_cimplicity:-:*:*:*:*:*:*:*

cpe:2.3:h:ge:intelligent_platforms_proficy_process_systems:-:*:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.00748

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-2j48-mrqm-r4w9

github

больше 3 лет назад