CVE:CVE-2014-0751
CNNVD:CNNVD-201401-524
GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY是美国通用电气（GE）公司的一套基于客户端/服务器的可视化和控制解决方案。该方案可借助特有的实时可视化技术，以及自动化监管、数字图形回放录像（DGR）等功能，提取资料信息并对以往事件进行图形化分析。
GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 8.2 SIM 24之前版本和Proficy Process Systems with CIMPLICITY中的CimWebServer.exe文件（又名WebViewer组件）中存在目录遍历漏洞。远程攻击者可通过向TCP 10212端口发送特制报文利用该漏洞执行任意代码。
solution:Upgrade ge intelligent_platforms_proficy_hmi%2fscada_cimplicity to a higher version than *:sim24,and avoid the version *:sim24; Upgrade ge intelligent_platforms_proficy_hmi/scada_cimplicity to a higher version than 4.01,7.5,8.0,8.1,8.2,and avoid the version 4.01,7.5,8.0,8.1,8.2; Upgrade ge intelligent_platforms_proficy_process_systems_with_cimplicity to a higher version than -