CVE-2013-2785

Опубликовано: 31 июл. 2013

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

Multiple buffer overflows in CimWebServer.exe in the WebView component in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY before 8.0 SIM 27, 8.1 before SIM 25, and 8.2 before SIM 19, and Proficy Process Systems with CIMPLICITY, allow remote attackers to execute arbitrary code via crafted data in packets to TCP port 10212, aka ZDI-CAN-1621 and ZDI-CAN-1624.

Ссылки

http://ics-cert.us-cert.gov/advisories/ICSA-13-170-01
US Government Resource
http://support.ge-ip.com/support/index?page=kbchannel&id=KB15602
http://ics-cert.us-cert.gov/advisories/ICSA-13-170-01
US Government Resource
http://support.ge-ip.com/support/index?page=kbchannel&id=KB15602

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ge:intelligent_platforms_proficy_hmi\/scada_cimplicity:8.0:*:*:*:*:*:*:*

cpe:2.3:a:ge:intelligent_platforms_proficy_hmi\/scada_cimplicity:8.1:*:*:*:*:*:*:*

cpe:2.3:a:ge:intelligent_platforms_proficy_hmi\/scada_cimplicity:8.2:*:*:*:*:*:*:*

cpe:2.3:a:ge:intelligent_platforms_proficy_process_systems_with_cimplicity:-:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.06635

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-rrxc-8qxg-r958

github

больше 3 лет назад