NetSight
medium4.3

CVE-2013-0653

Directory traversal vulnerability in substitute.bcl in the WebView CimWeb subsystem in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0…

Impact

Directory traversal vulnerability in substitute.bcl in the WebView CimWeb subsystem in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPLICITY, allows remote attackers to read arbitrary files via a crafted packet.

Affected products

VendorProductAffected versions
GeIntelligent Platforms Proficy Hmi\/Scada Cimplicity
Versions 4.01, 7.5, 8.0
GeIntelligent Platforms Proficy Process Systems With Cimplicity
All versions
GeIntelligent Platforms Proficy Process Systems
All versions

Weakness classification

References