<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 25 Oct 2026 03:16:16 +0000</lastBuildDate>
    <item>
      <title>CVE-2014-0751 — GE Proficy HMI/SCADA Path Traversal</title>
      <link>https://cve.radiocsirt.org/vuln/cve-2014-0751</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; GE Proficy HMI/SCADA - CIMPLICITY, GE Proficy Process Systems with CIMPLICITY&lt;/p&gt;
&lt;p&gt;The CIMPLICITY Web-based access component, CimWebServer, does not check 
the location of shell files being loaded into the system. By modifying 
the source location, an attacker could send shell code to the 
CimWebServer which would deploy the nefarious files as part of any SCADA
 project. This could allow the attacker to execute arbitrary code.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; GE Proficy HMI/SCADA - CIMPLICITY, GE Proficy Process Systems with CIMPLICITY&lt;/p&gt;
&lt;p&gt;The CIMPLICITY Web-based access component, CimWebServer, does not check 
the location of shell files being loaded into the system. By modifying 
the source location, an attacker could send shell code to the 
CimWebServer which would deploy the nefarious files as part of any SCADA
 project. This could allow the attacker to execute arbitrary code.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/cve-2014-0751</guid>
    </item>
  </channel>
</rss>
