CVE-2014-0751
By modifying the source location, an attacker could send shell code to the CimWebServer which would deploy the nefarious files as part of any SCADA project.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.72%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The CIMPLICITY Web-based access component, CimWebServer, does not check the location of shell files being loaded into the system. By modifying the source location, an attacker could send shell code to the CimWebServer which would deploy the nefarious files as part of any SCADA project. This could allow the attacker to execute arbitrary code.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 2.72% probability · 85th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- ge/intelligent platforms proficy hmi\%2fscada cimplicity · ge/intelligent platforms proficy hmi\/scada cimplicity · ge/intelligent platforms proficy process systems with cimplicity
- Source
- ics-cert@hq.dhs.gov
References
- http://support.ge-ip.com/support/index?page=kbchannel&id=KB15939
- http://www.securityfocus.com/bid/65124
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-023-01
- http://ics-cert.us-cert.gov/advisories/ICSA-14-023-01
- http://support.ge-ip.com/support/index?page=kbchannel&id=KB15940Vendor Advisory
- http://www.securityfocus.com/bid/65117
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.