Ge Intelligent Platforms Proficy Hmi/scada Cimplicity — known CVE vulnerabilities

Every CVE whose affected-product data names Ge Intelligent Platforms Proficy Hmi/scada Cimplicity, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (10)

• CVE-2013-2785 — CVSS 9.3 (critical): Multiple buffer overflows in CimWebServer.exe in the WebView component in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY before…
• CVE-2013-0654 — CVSS 9.3 (critical): CimWebServer in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPLICITY…
• CVE-2014-0750 — CVSS 7.5 (high): Directory traversal vulnerability in gefebt.exe in the WebView CimWeb components in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY…
• CVE-2013-2811 — CVSS 7.1 (high): The (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy DNP3 I/O driver before 7.20k, as used in…
• CVE-2014-0751 — CVSS 6.8 (medium): The CIMPLICITY Web-based access component, CimWebServer, does not check the location of shell files being loaded into the system. By…
• CVE-2017-12732 — CVSS 6.8 (medium): A Stack-based Buffer Overflow issue was discovered in GE CIMPLICITY Versions 9.0 and prior. A function reads a packet to indicate the next…
• CVE-2014-2355 — CVSS 6.6 (medium): The (1) CimView and (2) CimEdit components in GE Proficy HMI/SCADA-CIMPLICITY 8.2 and earlier allow remote attackers to gain privileges via…
• CVE-2013-2823 — CVSS 4.7 (medium): The (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy DNP3 I/O driver before 7.20k, as used in…
• CVE-2012-4689 — CVSS 4.3 (medium): Integer overflow in CimWebServer.exe in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process…
• CVE-2013-0653 — CVSS 4.3 (medium): Directory traversal vulnerability in substitute.bcl in the WebView CimWeb subsystem in GE Intelligent Platforms Proficy HMI/SCADA -…