CVE-2016-5787 General Electric (GE) Digital Proficy HMI/SCADA - CIMPLICITY before 8.2 SIM 27 mishandles service DACLs, which allows local users to modify a service configuration via unspecified vectors.
MediumCVSS 6.3
EPSS 0.39%
- Published
- Updated
- Exploit status
- No public exploit known
Description
General Electric (GE) Digital Proficy HMI/SCADA - CIMPLICITY before 8.2 SIM 27 mishandles service DACLs, which allows local users to modify a service configuration via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ge cimplicity | < 8.2 | 8.2 |
| ge cimplicity | = 8.2-sim1 | No fix listed |
| ge cimplicity | = 8.2-sim10 | No fix listed |
| ge cimplicity | = 8.2-sim11 | No fix listed |
| ge cimplicity | = 8.2-sim12 | No fix listed |
| ge cimplicity | = 8.2-sim13 | No fix listed |
| ge cimplicity | = 8.2-sim14 | No fix listed |
| ge cimplicity | = 8.2-sim15 | No fix listed |
| ge cimplicity | = 8.2-sim16 | No fix listed |
| ge cimplicity | = 8.2-sim17 | No fix listed |
| ge cimplicity | = 8.2-sim18 | No fix listed |
| ge cimplicity | = 8.2-sim19 | No fix listed |
| ge cimplicity | = 8.2-sim2 | No fix listed |
| ge cimplicity | = 8.2-sim20 | No fix listed |
| ge cimplicity | = 8.2-sim21 | No fix listed |
| ge cimplicity | = 8.2-sim22 | No fix listed |
| ge cimplicity | = 8.2-sim23 | No fix listed |
| ge cimplicity | = 8.2-sim24 | No fix listed |
| ge cimplicity | = 8.2-sim25 | No fix listed |
| ge cimplicity | = 8.2-sim26 | No fix listed |
| ge cimplicity | = 8.2-sim3 | No fix listed |
| ge cimplicity | = 8.2-sim4 | No fix listed |
| ge cimplicity | = 8.2-sim5 | No fix listed |
| ge cimplicity | = 8.2-sim6 | No fix listed |
| ge cimplicity | = 8.2-sim7 | No fix listed |
Show 2 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ge cimplicity | = 8.2-sim8 | No fix listed |
| ge cimplicity | = 8.2-sim9 | No fix listed |
References
- 91727 broken-link third-party-advisory vdb-entry
- ge-ip.force.com permissions-required vendor-advisory
- ics-cert.us-cert.gov third-party-advisory us-government-resource