CVE-2014-0750
GE Proficy HMI/SCADA - CIMPLICITY < 8.2 - Remote Code Execution via Directory Traversal in WebView CimWeb
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2014-0750.
PoCs published by Metasploit, amisto0x07, Z0mb1E, juan vazquez, including Metasploit module exploits/windows/scada/ge_proficy_cimplicity_gefebt.
AI-analyzed exploit summary This Metasploit module exploits a remote code execution vulnerability in GE Proficy CIMPLICITY's gefebt.exe component via malicious BCL files. It leverages WebDAV or SMB to deliver payloads and execute arbitrary code on the target system.
Description
Directory traversal vulnerability in gefebt.exe in the WebView CimWeb components in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY through 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary code via a crafted HTTP request, aka ZDI-CAN-1622.
Exploits (2)
This Metasploit module exploits a remote code execution vulnerability in GE Proficy CIMPLICITY's gefebt.exe component via malicious BCL files. It leverages WebDAV or SMB to deliver payloads and execute arbitrary code on the target system.
This Metasploit module exploits a vulnerability in GE Proficy CIMPLICITY's gefebt.exe component to achieve remote code execution by delivering malicious BCL files via a WebDAV server or external SMB service. It generates and serves payloads to execute arbitrary code on the target system.