cve-2014-0751

HIGH vulncheck_kev
Description

The CIMPLICITY Web-based access component, CimWebServer, does not check the location of shell files being loaded into the system. By modifying the source location, an attacker could send shell code to the CimWebServer which would deploy the nefarious files as part of any SCADA project. This could allow the attacker to execute arbitrary code.

Timeline
Published
2014-12-10 00:00 UTC
Last Modified
2014-12-10
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cvss": 0.0,
  "datePublished": "2014-12-10T00:00:00Z",
  "dateUpdated": "2014-12-10T00:00:00Z",
  "description": "The CIMPLICITY Web-based access component, CimWebServer, does not check \nthe location of shell files being loaded into the system. By modifying \nthe source location, an attacker could send shell code to the \nCimWebServer which would deploy the nefarious files as part of any SCADA\n project. This could allow the attacker to execute arbitrary code.",
  "dueDate": "",
  "id": "CVE-2014-0751",
  "kev_catalogs": [
    "vulncheck"
  ],
  "knownRansomwareCampaignUse": "Unknown",
  "product": "CIMPLICITY",
  "requiredAction": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.",
  "severity": "HIGH",
  "source": "vulncheck_kev",
  "title": "GE CIMPLICITY Improper Limitation of a Pathname to a Restricted Directory",
  "vendor": "GE"
}
Enrichment data
View JSON API Download JSON