What’s Vulnerable › Vulnerabilities

CVE-2014-0750: GE Proficy HMI/SCADA Path Traversal

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 69.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2014-01-25 · updated 2026-06-17
• Weakness: CWE-22

Description

Directory traversal vulnerability in gefebt.exe in the WebView CimWeb components in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY through 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary code via a crafted HTTP request, aka ZDI-CAN-1622.

Affected products

• GE Intelligent Platforms Proficy Hmi%2Fscada Cimplicity: through 8.2
• GE CIMPLICITY: 4.01, 7.5, 8.0, 8.1, 8.2
• GE Intelligent Platforms Proficy Process Systems With Cimplicity: all versions

References

• http://support.ge-ip.com/support/index?page=kbchannel&id=KB15939
• http://www.securityfocus.com/bid/65124
• https://www.cisa.gov/news-events/ics-advisories/icsa-14-023-01
• http://ics-cert.us-cert.gov/advisories/ICSA-14-023-01
• http://support.ge-ip.com/support/index?page=kbchannel&id=KB15939
• http://www.securityfocus.com/bid/65124

Get alerted when CVE-2014-0750 or the next vulnerability affects your stack