Vulnerability Report

CVE-2014-0750

Title: Ge Intelligent Platforms Proficy Hmi\/Scada Cimplicity RCE

Arbitrary File Access

Proof Of Concept

PoC Available for CVE-2014-0750

CWE Category CWE-22

Published Date Jan 25, 2014

Modified Date Jun 17, 2026

Exploit Status Available

Score 7.5 CVSS v2.0

Exploit Probability (EPSS)

70.22%

Vulnerability Summary

CVE-2014-0750: Directory traversal vulnerability in gefebt.exe in the WebView CimWeb components in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY through 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary code via a crafted HTTP request, aka ZDI-CAN-1622.

Impacted Vendors

ge 3

Reference Links

http://support.ge-ip.com/support/index?page=kbchannel&id=KB15939 http://www.securityfocus.com/bid/65124 https://www.cisa.gov/news-events/ics-advisories/icsa-14-023-01 http://ics-cert.us-cert.gov/advisories/ICSA-14-023-01 http://support.ge-ip.com/support/index?page=kbchannel&id=KB15939 http://www.securityfocus.com/bid/65124

CVSS v2.0

Source Entity [email protected]

Severity HIGH

7.5

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS v2.0

Source Entity [email protected]

Severity HIGH

7.5

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:N/AC:L/Au:N/C:P/I:P/A:P

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2014-0750 Exploits & PoCs (Proof Of Concept)

Exploit-DB https://www.exploit-db.com/exploits/31987

View Code

June 17, 2026 MODIFIED

Vulnerability data updated via NVD.

April 29, 2026 MODIFIED

Vulnerability data updated via NVD.

August 22, 2025 MODIFIED

Vulnerability data or affected products updated.

January 25, 2014 PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A

Complexity N/A

Privileges N/A

Interaction NONE

CVSS Vector String


                                    AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected Stack

No specific products linked.