cve-2014-0751
HIGH vulncheck_kev
Description
The CIMPLICITY Web-based access component, CimWebServer, does not check the location of shell files being loaded into the system. By modifying the source location, an attacker could send shell code to the CimWebServer which would deploy the nefarious files as part of any SCADA project. This could allow the attacker to execute arbitrary code.
Timeline
- Published
- 2014-12-10 00:00 UTC
- Last Modified
- 2014-12-10
CVSS Details
CVSS details not available.
Affected Products
No product information available.
References
No references available.
Linked Vulnerabilities
No linked vulnerabilities found.
{
"cvss": 0.0,
"datePublished": "2014-12-10T00:00:00Z",
"dateUpdated": "2014-12-10T00:00:00Z",
"description": "The CIMPLICITY Web-based access component, CimWebServer, does not check \nthe location of shell files being loaded into the system. By modifying \nthe source location, an attacker could send shell code to the \nCimWebServer which would deploy the nefarious files as part of any SCADA\n project. This could allow the attacker to execute arbitrary code.",
"dueDate": "",
"id": "CVE-2014-0751",
"kev_catalogs": [
"vulncheck"
],
"knownRansomwareCampaignUse": "Unknown",
"product": "CIMPLICITY",
"requiredAction": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.",
"severity": "HIGH",
"source": "vulncheck_kev",
"title": "GE CIMPLICITY Improper Limitation of a Pathname to a Restricted Directory",
"vendor": "GE"
}
Enrichment data
Aggregated bundle (all enrichments)