GE Proficy HMI/SCADA Path Traversal
78Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendcvss 7.5epss 70%
from disclosure to weapon34 days
Published on NVDJan 25
1st PoC+34d
metasploitJan 23
exploitation probability
70%top 1% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Directory traversal vulnerability in gefebt.exe in the WebView CimWeb components in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY through 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary code via a crafted HTTP request, aka ZDI-CAN-1622.
AV:N/AC:L/Au:N/C:P/I:P/A:P
public PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/31987⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.