CVE-2013-0653 Directory traversal vulnerability in substitute.bcl in the WebView CimWeb subsystem in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPLI...
MediumCVSS 4.3
EPSS 19.1%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in substitute.bcl in the WebView CimWeb subsystem in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPLICITY, allows remote attackers to read arbitrary files via a crafted packet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ge intelligent platforms proficy hmiscada cimplicity | = 4.01 | No fix listed |
| ge intelligent platforms proficy hmiscada cimplicity | = 7.5 | No fix listed |
| ge intelligent platforms proficy hmiscada cimplicity | = 8.0 | No fix listed |
| ge intelligent platforms proficy process systems with cimplicity | All versions | No fix listed |
| ge intelligent platforms proficy process systems | All versions | No fix listed |
References
- www.us-cert.gov us-government-resource