{"cvss":0.0,"datePublished":"2014-12-10T00:00:00Z","dateUpdated":"2014-12-10T00:00:00Z","description":"The CIMPLICITY Web-based access component, CimWebServer, does not check \nthe location of shell files being loaded into the system. By modifying \nthe source location, an attacker could send shell code to the \nCimWebServer which would deploy the nefarious files as part of any SCADA\n project. This could allow the attacker to execute arbitrary code.","dueDate":"","id":"CVE-2014-0751","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"CIMPLICITY","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"GE CIMPLICITY Improper Limitation of a Pathname to a Restricted Directory","vendor":"GE"}