Vulnerability-Lookup

CNVD-2015-00443

Vulnerability from cnvd - Published: 2015-01-21

Title

GE Proficy HMI/SCADA-CIMPLICITY存在多个本地缓冲区溢出漏洞

Description

GE智能平台的Proficy HMI/SCADA–iFIX是世界领先的工业自动化软件解决方案，提供了生产操作的过程可视化、数据采集和数据监控。 GE Proficy HMI/SCADA-CIMPLICITY存在多个本地缓冲区溢出漏洞，允许本地攻击者利用此漏洞在应用程序的上下文中执行任意代码。

Severity

中

Patch Name

GE Proficy HMI/SCADA-CIMPLICITY存在多个本地缓冲区溢出漏洞的补丁

Patch Description

GE 智能平台的Proficy HMI/SCADA–iFIX 是世界领先的工业自动化软件解决方案，提供了生产操作的过程可视化、数据采集和数据监控。 GE Proficy HMI/SCADA-CIMPLICITY存在多个本地缓冲区溢出漏洞，允许本地攻击者利用此漏洞在应用程序的上下文中执行任意代码。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

目前厂商已经发布升级补丁/版本以修复这个安全问题，请用户及时下载更新： http://support.ge-ip.com/support/index?page=dwchannel&id=DN4219

Reference

http://www.securityfocus.com/bid/72096 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2355

Impacted products

Name
General Electric Company Proficy HMI/SCADA-CIMPLICITY 8.2

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "72096"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2014-2355"
    }
  },
  "description": "GE\u667a\u80fd\u5e73\u53f0\u7684Proficy HMI/SCADA\u2013iFIX\u662f\u4e16\u754c\u9886\u5148\u7684\u5de5\u4e1a\u81ea\u52a8\u5316\u8f6f\u4ef6\u89e3\u51b3\u65b9\u6848\uff0c\u63d0\u4f9b\u4e86\u751f\u4ea7\u64cd\u4f5c\u7684\u8fc7\u7a0b\u53ef\u89c6\u5316\u3001\u6570\u636e\u91c7\u96c6\u548c\u6570\u636e\u76d1\u63a7\u3002 \r\n\r\nGE Proficy HMI/SCADA-CIMPLICITY\u5b58\u5728\u591a\u4e2a\u672c\u5730\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\uff0c\u5141\u8bb8\u672c\u5730\u653b\u51fb\u8005\u5229\u7528\u6b64\u6f0f\u6d1e\u5728\u5e94\u7528\u7a0b\u5e8f\u7684\u4e0a\u4e0b\u6587\u4e2d\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002",
  "discovererName": "Said Arfi",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u5347\u7ea7\u8865\u4e01/\u7248\u672c\u4ee5\u4fee\u590d\u8fd9\u4e2a\u5b89\u5168\u95ee\u9898\uff0c\u8bf7\u7528\u6237\u53ca\u65f6\u4e0b\u8f7d\u66f4\u65b0\uff1a\r\nhttp://support.ge-ip.com/support/index?page=dwchannel\u0026id=DN4219",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2015-00443",
  "openTime": "2015-01-21",
  "patchDescription": "GE \u667a\u80fd\u5e73\u53f0\u7684Proficy HMI/SCADA\u2013iFIX \u662f\u4e16\u754c\u9886\u5148\u7684\u5de5\u4e1a\u81ea\u52a8\u5316\u8f6f\u4ef6\u89e3\u51b3\u65b9\u6848\uff0c\u63d0\u4f9b\u4e86\u751f\u4ea7\u64cd\u4f5c\u7684\u8fc7\u7a0b\u53ef\u89c6\u5316\u3001\u6570\u636e\u91c7\u96c6\u548c\u6570\u636e\u76d1\u63a7\u3002 \r\n\r\nGE Proficy HMI/SCADA-CIMPLICITY\u5b58\u5728\u591a\u4e2a\u672c\u5730\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\uff0c\u5141\u8bb8\u672c\u5730\u653b\u51fb\u8005\u5229\u7528\u6b64\u6f0f\u6d1e\u5728\u5e94\u7528\u7a0b\u5e8f\u7684\u4e0a\u4e0b\u6587\u4e2d\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "GE Proficy HMI/SCADA-CIMPLICITY\u5b58\u5728\u591a\u4e2a\u672c\u5730\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "General Electric Company Proficy HMI/SCADA-CIMPLICITY 8.2"
  },
  "referenceLink": "http://www.securityfocus.com/bid/72096\r\nhttp://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2355",
  "serverity": "\u4e2d",
  "submitTime": "2015-01-20",
  "title": "GE Proficy HMI/SCADA-CIMPLICITY\u5b58\u5728\u591a\u4e2a\u672c\u5730\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e"
}

CVE-2014-2355 (GCVE-0-2014-2355)

Vulnerability from cvelistv5 – Published: 2015-01-17 02:00 – Updated: 2025-10-03 17:01

Title

GE Proficy HMI/SCADA CIMPLICITY CimView

Summary

The (1) CimView and (2) CimEdit components in GE Proficy HMI/SCADA-CIMPLICITY 8.2 and earlier allow remote attackers to gain privileges via a crafted CIMPLICITY screen (aka .CIM) file.

Severity

No CVSS data available.

CWE

CWE-119

Assigner

icscert icscert root Scorecard

References

2 references

URL	Tags
https://www.cisa.gov/news-events/ics-advisories/i…
https://ics-cert.us-cert.gov/advisories/ICSA-14-289-02	x_refsource_MISCx_transferred

Impacted products

1 product

Vendor	Product	Version
GE	Proficy HMI/SCADA–CIMPLICITY	Affected: 0 , ≤ 8.2 (custom)

Date Public

2015-01-13 07:00

Credits

Said Arfi

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:14:25.389Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://ics-cert.us-cert.gov/advisories/ICSA-14-289-02"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Proficy HMI/SCADA\u2013CIMPLICITY",
          "vendor": "GE",
          "versions": [
            {
              "lessThanOrEqual": "8.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Said Arfi"
        }
      ],
      "datePublic": "2015-01-13T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eThe (1) CimView and (2) CimEdit components in GE Proficy HMI/SCADA-CIMPLICITY 8.2 and earlier allow remote attackers to gain privileges via a crafted CIMPLICITY screen (aka .CIM) file.\u003c/p\u003e"
            }
          ],
          "value": "The (1) CimView and (2) CimEdit components in GE Proficy HMI/SCADA-CIMPLICITY 8.2 and earlier allow remote attackers to gain privileges via a crafted CIMPLICITY screen (aka .CIM) file."
        }
      ],
      "metrics": [
        {
          "cvssV2_0": {
            "accessComplexity": "MEDIUM",
            "accessVector": "LOCAL",
            "authentication": "SINGLE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.6,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:M/Au:S/C:C/I:C/A:C",
            "version": "2.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-119",
              "description": "CWE-119",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-10-03T17:01:02.978Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-14-289-02"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eGE recommends that asset owners apply product updates to Proficy \nHMI/SCADA\u2013CIMPLICITY Versions 8.1 and 8.2. The following product updates\n address the memory access violation vulnerability:\u003c/p\u003e\u003cp\u003eProficy HMI/SCADA \u2013 CIMPLICITY 8.1 SIM 29 (DN4219) available at:\u0026nbsp;\u003ca target=\"_blank\" rel=\"nofollow\" href=\"http://support.ge-ip.com/support/index?page=dwchannel\u0026amp;id=DN4219\"\u003ehttp://support.ge-ip.com/support/index?page=dwchannel\u0026amp;id=DN4219\u003c/a\u003e\u003c/p\u003e\u003cp\u003eProficy HMI/SCADA\u2013CIMPLICITY 8.2 SIM 26 (DN4197) available at:\u0026nbsp;\u003ca target=\"_blank\" rel=\"nofollow\" href=\"http://support.ge-ip.com/support/index?page=dwchannel\u0026amp;id=DN4197\"\u003ehttp://support.ge-ip.com/support/index?page=dwchannel\u0026amp;id=DN4197\u003c/a\u003e\u003c/p\u003e\n\n\u003cbr\u003e"
            }
          ],
          "value": "GE recommends that asset owners apply product updates to Proficy \nHMI/SCADA\u2013CIMPLICITY Versions 8.1 and 8.2. The following product updates\n address the memory access violation vulnerability:\n\nProficy HMI/SCADA \u2013 CIMPLICITY 8.1 SIM 29 (DN4219) available at:\u00a0 http://support.ge-ip.com/support/index?page=dwchannel\u0026id=DN4219 \n\nProficy HMI/SCADA\u2013CIMPLICITY 8.2 SIM 26 (DN4197) available at:\u00a0 http://support.ge-ip.com/support/index?page=dwchannel\u0026id=DN4197"
        }
      ],
      "source": {
        "advisory": "ICSA-14-289-02",
        "discovery": "EXTERNAL"
      },
      "title": "GE Proficy HMI/SCADA CIMPLICITY CimView",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIn cases where upgrading is not feasible, GE advises asset owners \nusing CIMPLICITY versions prior to 8.1 to consider using the following \nrecommendations that may mitigate or eliminate the impact of the \nvulnerability:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eTake steps to properly secure and protect stored CIMPLICITY screen files (.CIM).\u003c/li\u003e\n\u003cli\u003eAvoid using .CIM files received from unknown sources.\u003c/li\u003e\n\u003cli\u003eAvoid sending unprotected .CIM files over unencrypted networks or public Internet.\u003c/li\u003e\n\u003cli\u003eConsider using a strong hashing algorithm to validate integrity of \ncreated .CIM files and ensure they have not been tampered with over \ntime.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cbr\u003e"
            }
          ],
          "value": "In cases where upgrading is not feasible, GE advises asset owners \nusing CIMPLICITY versions prior to 8.1 to consider using the following \nrecommendations that may mitigate or eliminate the impact of the \nvulnerability:\n\n\n\n  *  Take steps to properly secure and protect stored CIMPLICITY screen files (.CIM).\n\n  *  Avoid using .CIM files received from unknown sources.\n\n  *  Avoid sending unprotected .CIM files over unencrypted networks or public Internet.\n\n  *  Consider using a strong hashing algorithm to validate integrity of \ncreated .CIM files and ensure they have not been tampered with over \ntime."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "ics-cert@hq.dhs.gov",
          "ID": "CVE-2014-2355",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The (1) CimView and (2) CimEdit components in GE Proficy HMI/SCADA-CIMPLICITY 8.2 and earlier allow remote attackers to gain privileges via a crafted CIMPLICITY screen (aka .CIM) file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://ics-cert.us-cert.gov/advisories/ICSA-14-289-02",
              "refsource": "MISC",
              "url": "https://ics-cert.us-cert.gov/advisories/ICSA-14-289-02"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2014-2355",
    "datePublished": "2015-01-17T02:00:00.000Z",
    "dateReserved": "2014-03-13T00:00:00.000Z",
    "dateUpdated": "2025-10-03T17:01:02.978Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CNVD-2015-00443

CVE-2014-2355 (GCVE-0-2014-2355)

Tags

Sightings

Nomenclature

Related by attack behaviour