CVE-2014-0750

Name: CVE-2014-0750
Creator: NVD / NIST
Published: 2014-01-25T22:55:04.55+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 70.22%

Last modified Jun 17, 2026

CVE-2014-0750 is a vulnerability of currently unknown severity. Directory traversal vulnerability in gefebt.exe in the WebView CimWeb components in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY through 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary code via a crafted HTTP request, aka ZDI-CAN-1622.. EPSS estimates a 70.22% chance of exploitation in the next 30 days.

Description

Directory traversal vulnerability in gefebt.exe in the WebView CimWeb components in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY through 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary code via a crafted HTTP request, aka ZDI-CAN-1622.

Metrics

EPSS Probability

70.22%

99.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Vendor	Product	Versions	Update
Ge	Intelligent Platforms Proficy Hmi\%2fscada Cimplicity	<= 8.2	Sim24
Ge	Intelligent Platforms Proficy Hmi\/Scada Cimplicity	4.01	—
Ge	Intelligent Platforms Proficy Hmi\/Scada Cimplicity	7.5	—
Ge	Intelligent Platforms Proficy Hmi\/Scada Cimplicity	8.0	—
Ge	Intelligent Platforms Proficy Hmi\/Scada Cimplicity	8.1	—
Ge	Intelligent Platforms Proficy Hmi\/Scada Cimplicity	8.2	—
Ge	Intelligent Platforms Proficy Process Systems With Cimplicity	All versions	—

References

http://support.ge-ip.com/support/index?page=kbchannel&id=KB15939Vendor Advisory
http://www.securityfocus.com/bid/65124
https://www.cisa.gov/news-events/ics-advisories/icsa-14-023-01
http://ics-cert.us-cert.gov/advisories/ICSA-14-023-01US Government Resource
http://support.ge-ip.com/support/index?page=kbchannel&id=KB15939Vendor Advisory
http://www.securityfocus.com/bid/65124

Timeline

Published: Jan 25, 2014
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2014-0750?

How severe is CVE-2014-0750?

Severity scoring for CVE-2014-0750 is pending analysis. The EPSS model estimates a 70.22% probability of exploitation in the next 30 days.

How do I fix CVE-2014-0750?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2014-0750?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST