CVE-2013-0653
GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01-8.0 - Path Traversal via WebView CimWeb Substitute.bcl
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2013-0653.
PoCs published by Unknown, juan vazquez, including Metasploit module auxiliary/admin/scada/ge_proficy_substitute_traversal.
AI-analyzed exploit summary This Metasploit module exploits a directory traversal vulnerability in GE Proficy Cimplicity WebView (gefebt.exe) to retrieve arbitrary files with SYSTEM privileges. It sends a crafted HTTP request to traverse directories and exfiltrate file contents.
Description
Directory traversal vulnerability in substitute.bcl in the WebView CimWeb subsystem in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPLICITY, allows remote attackers to read arbitrary files via a crafted packet.
Exploits (1)
This Metasploit module exploits a directory traversal vulnerability in GE Proficy Cimplicity WebView (gefebt.exe) to retrieve arbitrary files with SYSTEM privileges. It sends a crafted HTTP request to traverse directories and exfiltrate file contents.