CVE-2016-5787 - Vulnerability Details

Vendors	Products
Ge	Cimplicity

Link	Providers
http://www.securityfocus.com/bid/91727
https://ge-ip.force.com/communities/en_US/Article/GE-Digital-Security-Advisory-GED-16-01
https://ics-cert.us-cert.gov/advisories/ICSA-16-194-02

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2016-07-12T00:00:00", "descriptions": [{"lang": "en", "value": "General Electric (GE) Digital Proficy HMI/SCADA - CIMPLICITY before 8.2 SIM 27 mishandles service DACLs, which allows local users to modify a service configuration via unspecified vectors."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2016-11-25T19:57:01", "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "shortName": "icscert"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://ics-cert.us-cert.gov/advisories/ICSA-16-194-02"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://ge-ip.force.com/communities/en_US/Article/GE-Digital-Security-Advisory-GED-16-01"}, {"name": "91727", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/91727"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "ics-cert@hq.dhs.gov", "ID": "CVE-2016-5787", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "General Electric (GE) Digital Proficy HMI/SCADA - CIMPLICITY before 8.2 SIM 27 mishandles service DACLs, which allows local users to modify a service configuration via unspecified vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://ics-cert.us-cert.gov/advisories/ICSA-16-194-02", "refsource": "MISC", "url": "https://ics-cert.us-cert.gov/advisories/ICSA-16-194-02"}, {"name": "https://ge-ip.force.com/communities/en_US/Article/GE-Digital-Security-Advisory-GED-16-01", "refsource": "CONFIRM", "url": "https://ge-ip.force.com/communities/en_US/Article/GE-Digital-Security-Advisory-GED-16-01"}, {"name": "91727", "refsource": "BID", "url": "http://www.securityfocus.com/bid/91727"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T01:15:09.008Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://ics-cert.us-cert.gov/advisories/ICSA-16-194-02"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://ge-ip.force.com/communities/en_US/Article/GE-Digital-Security-Advisory-GED-16-01"}, {"name": "91727", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/91727"}]}]}, "cveMetadata": {"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "assignerShortName": "icscert", "cveId": "CVE-2016-5787", "datePublished": "2016-07-15T16:00:00", "dateReserved": "2016-06-23T00:00:00", "dateUpdated": "2024-08-06T01:15:09.008Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : n/a (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : n/a (string)

}

]

}

]

datePublic : 2016-07-12T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : General Electric (GE) Digital Proficy HMI/SCADA - CIMPLICITY before 8.2 SIM 27 mishandles service DACLs, which allows local users to modify a service configuration via unspecified vectors. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : n/a (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2016-11-25T19:57:01 (string)

orgId : 7d14cffa-0d7d-4270-9dc0-52cabd5a23a6 (string)

shortName : icscert (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://ics-cert.us-cert.gov/advisories/ICSA-16-194-02 (string)

}

1 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : https://ge-ip.force.com/communities/en_US/Article/GE-Digital-Security-Advisory-GED-16-01 (string)

}

2 : { »

name : 91727 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

]

url : http://www.securityfocus.com/bid/91727 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : ics-cert@hq.dhs.gov (string)

ID : CVE-2016-5787 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : n/a (string)

version : { »

version_data : [ »

0 : { »

version_value : n/a (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : General Electric (GE) Digital Proficy HMI/SCADA - CIMPLICITY before 8.2 SIM 27 mishandles service DACLs, which allows local users to modify a service configuration via unspecified vectors. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : n/a (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://ics-cert.us-cert.gov/advisories/ICSA-16-194-02 (string)

refsource : MISC (string)

url : https://ics-cert.us-cert.gov/advisories/ICSA-16-194-02 (string)

}

1 : { »

name : https://ge-ip.force.com/communities/en_US/Article/GE-Digital-Security-Advisory-GED-16-01 (string)

refsource : CONFIRM (string)

url : https://ge-ip.force.com/communities/en_US/Article/GE-Digital-Security-Advisory-GED-16-01 (string)

}

2 : { »

name : 91727 (string)

refsource : BID (string)

url : http://www.securityfocus.com/bid/91727 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-06T01:15:09.008Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://ics-cert.us-cert.gov/advisories/ICSA-16-194-02 (string)

}

1 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : https://ge-ip.force.com/communities/en_US/Article/GE-Digital-Security-Advisory-GED-16-01 (string)

}

2 : { »

name : 91727 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

2 : x_transferred (string)

]

url : http://www.securityfocus.com/bid/91727 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 7d14cffa-0d7d-4270-9dc0-52cabd5a23a6 (string)

assignerShortName : icscert (string)

cveId : CVE-2016-5787 (string)

datePublished : 2016-07-15T16:00:00 (string)

dateReserved : 2016-06-23T00:00:00 (string)

dateUpdated : 2024-08-06T01:15:09.008Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ge:cimplicity:*:*:*:*:*:*:*:*", "matchCriteriaId": "7D612AFA-8D00-4BD8-805F-CF0F081CE58C", "versionEndExcluding": "8.2", "vulnerable": true}, {"criteria": "cpe:2.3:a:ge:cimplicity:8.2:sim1:*:*:*:*:*:*", "matchCriteriaId": "35CA3DDA-4A19-4387-B8C5-675985E5039E", "vulnerable": true}, {"criteria": "cpe:2.3:a:ge:cimplicity:8.2:sim10:*:*:*:*:*:*", "matchCriteriaId": "E5ED995F-8528-42EC-BFD3-E0A042565AB0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ge:cimplicity:8.2:sim11:*:*:*:*:*:*", "matchCriteriaId": "9BDA2D7C-B50E-44AB-AF5C-56208C1E54AE", "vulnerable": true}, {"criteria": "cpe:2.3:a:ge:cimplicity:8.2:sim12:*:*:*:*:*:*", "matchCriteriaId": "1B2A334B-2DFA-486D-B6D9-ABCCD0247FD7", "vulnerable": true}, {"criteria": "cpe:2.3:a:ge:cimplicity:8.2:sim13:*:*:*:*:*:*", "matchCriteriaId": "E7A22369-313E-4088-9514-B01368F764C9", "vulnerable": true}, {"criteria": "cpe:2.3:a:ge:cimplicity:8.2:sim14:*:*:*:*:*:*", "matchCriteriaId": "5CFD955C-4298-446C-9286-7B0D84509191", "vulnerable": true}, {"criteria": "cpe:2.3:a:ge:cimplicity:8.2:sim15:*:*:*:*:*:*", "matchCriteriaId": "68551205-68AF-4757-90CC-15161BC7384E", "vulnerable": true}, {"criteria": "cpe:2.3:a:ge:cimplicity:8.2:sim16:*:*:*:*:*:*", "matchCriteriaId": "94FD0998-A644-445F-9DA7-A857A981CC24", "vulnerable": true}, {"criteria": "cpe:2.3:a:ge:cimplicity:8.2:sim17:*:*:*:*:*:*", "matchCriteriaId": "D96AC352-07AE-41A5-9805-080DF9DD4B2C", "vulnerable": true}, {"criteria": "cpe:2.3:a:ge:cimplicity:8.2:sim18:*:*:*:*:*:*", "matchCriteriaId": "419CD7DE-CCA1-4547-8339-748B840489F4", "vulnerable": true}, {"criteria": "cpe:2.3:a:ge:cimplicity:8.2:sim19:*:*:*:*:*:*", "matchCriteriaId": "FC1E1F21-9BC7-4ACA-91ED-4D4AECF1672F", "vulnerable": true}, {"criteria": "cpe:2.3:a:ge:cimplicity:8.2:sim2:*:*:*:*:*:*", "matchCriteriaId": "BDB6AC3A-82C8-4C49-8B54-CF6684529CC9", "vulnerable": true}, {"criteria": "cpe:2.3:a:ge:cimplicity:8.2:sim20:*:*:*:*:*:*", "matchCriteriaId": "D4D0541D-E2E1-406F-AF2B-B482C07FD55D", "vulnerable": true}, {"criteria": "cpe:2.3:a:ge:cimplicity:8.2:sim21:*:*:*:*:*:*", "matchCriteriaId": "5A652C12-24BB-4CF6-9C28-35FE350CF403", "vulnerable": true}, {"criteria": "cpe:2.3:a:ge:cimplicity:8.2:sim22:*:*:*:*:*:*", "matchCriteriaId": "A6B4ED3A-56E1-439D-8573-16CF442B45FD", "vulnerable": true}, {"criteria": "cpe:2.3:a:ge:cimplicity:8.2:sim23:*:*:*:*:*:*", "matchCriteriaId": "FD9B715D-48C1-4F44-8EE4-C10828B1EE8A", "vulnerable": true}, {"criteria": "cpe:2.3:a:ge:cimplicity:8.2:sim24:*:*:*:*:*:*", "matchCriteriaId": "F33C2217-650A-4969-9006-471D869D63AF", "vulnerable": true}, {"criteria": "cpe:2.3:a:ge:cimplicity:8.2:sim25:*:*:*:*:*:*", "matchCriteriaId": "8331490A-A63D-4903-9CD6-D687EA1F6DA3", "vulnerable": true}, {"criteria": "cpe:2.3:a:ge:cimplicity:8.2:sim26:*:*:*:*:*:*", "matchCriteriaId": "BD71870C-1213-4369-804A-5E67C79C5B1C", "vulnerable": true}, {"criteria": "cpe:2.3:a:ge:cimplicity:8.2:sim3:*:*:*:*:*:*", "matchCriteriaId": "75F41815-D16F-4C29-B1DF-E5F956FD464F", "vulnerable": true}, {"criteria": "cpe:2.3:a:ge:cimplicity:8.2:sim4:*:*:*:*:*:*", "matchCriteriaId": "6BF44E77-00D5-471C-A4AF-E7A905BA299E", "vulnerable": true}, {"criteria": "cpe:2.3:a:ge:cimplicity:8.2:sim5:*:*:*:*:*:*", "matchCriteriaId": "0995915D-025A-46E6-8E2F-237E33369E75", "vulnerable": true}, {"criteria": "cpe:2.3:a:ge:cimplicity:8.2:sim6:*:*:*:*:*:*", "matchCriteriaId": "ABBDCBBB-AD6A-4752-9C07-22C4B6494057", "vulnerable": true}, {"criteria": "cpe:2.3:a:ge:cimplicity:8.2:sim7:*:*:*:*:*:*", "matchCriteriaId": "A0D0F15D-849A-4344-8725-7996CA9DACA5", "vulnerable": true}, {"criteria": "cpe:2.3:a:ge:cimplicity:8.2:sim8:*:*:*:*:*:*", "matchCriteriaId": "79494C7A-F9E9-4DBB-A44B-5897948338DC", "vulnerable": true}, {"criteria": "cpe:2.3:a:ge:cimplicity:8.2:sim9:*:*:*:*:*:*", "matchCriteriaId": "2977EC39-E34B-4A07-98B9-A1F1909332FD", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "General Electric (GE) Digital Proficy HMI/SCADA - CIMPLICITY before 8.2 SIM 27 mishandles service DACLs, which allows local users to modify a service configuration via unspecified vectors."}, {"lang": "es", "value": "General Electric (GE) Digital Proficy HMI/SCADA - CIMPLICITY en versiones anteriores a 8.2 SIM 27 no maneja adecuadamente el servicio DACLs, lo que permite a usuarios locales modificar una configuraci\u00f3n de servicio a trav\u00e9s de vectores no especificados."}], "id": "CVE-2016-5787", "lastModified": "2025-04-12T10:46:40.837", "metrics": {"cvssMetricV2": [{"acInsufInfo": true, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.6, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 2.0, "impactScore": 3.7, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2016-07-15T16:59:11.423", "references": [{"source": "ics-cert@hq.dhs.gov", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/91727"}, {"source": "ics-cert@hq.dhs.gov", "tags": ["Permissions Required", "Vendor Advisory"], "url": "https://ge-ip.force.com/communities/en_US/Article/GE-Digital-Security-Advisory-GED-16-01"}, {"source": "ics-cert@hq.dhs.gov", "tags": ["Third Party Advisory", "US Government Resource"], "url": "https://ics-cert.us-cert.gov/advisories/ICSA-16-194-02"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/91727"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Permissions Required", "Vendor Advisory"], "url": "https://ge-ip.force.com/communities/en_US/Article/GE-Digital-Security-Advisory-GED-16-01"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "US Government Resource"], "url": "https://ics-cert.us-cert.gov/advisories/ICSA-16-194-02"}], "sourceIdentifier": "ics-cert@hq.dhs.gov", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-668"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:ge:cimplicity:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 7D612AFA-8D00-4BD8-805F-CF0F081CE58C (string)

versionEndExcluding : 8.2 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:ge:cimplicity:8.2:sim1:*:*:*:*:*:* (string)

matchCriteriaId : 35CA3DDA-4A19-4387-B8C5-675985E5039E (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:ge:cimplicity:8.2:sim10:*:*:*:*:*:* (string)

matchCriteriaId : E5ED995F-8528-42EC-BFD3-E0A042565AB0 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:ge:cimplicity:8.2:sim11:*:*:*:*:*:* (string)

matchCriteriaId : 9BDA2D7C-B50E-44AB-AF5C-56208C1E54AE (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:ge:cimplicity:8.2:sim12:*:*:*:*:*:* (string)

matchCriteriaId : 1B2A334B-2DFA-486D-B6D9-ABCCD0247FD7 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:ge:cimplicity:8.2:sim13:*:*:*:*:*:* (string)

matchCriteriaId : E7A22369-313E-4088-9514-B01368F764C9 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:ge:cimplicity:8.2:sim14:*:*:*:*:*:* (string)

matchCriteriaId : 5CFD955C-4298-446C-9286-7B0D84509191 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:ge:cimplicity:8.2:sim15:*:*:*:*:*:* (string)

matchCriteriaId : 68551205-68AF-4757-90CC-15161BC7384E (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:ge:cimplicity:8.2:sim16:*:*:*:*:*:* (string)

matchCriteriaId : 94FD0998-A644-445F-9DA7-A857A981CC24 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:ge:cimplicity:8.2:sim17:*:*:*:*:*:* (string)

matchCriteriaId : D96AC352-07AE-41A5-9805-080DF9DD4B2C (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:ge:cimplicity:8.2:sim18:*:*:*:*:*:* (string)

matchCriteriaId : 419CD7DE-CCA1-4547-8339-748B840489F4 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:ge:cimplicity:8.2:sim19:*:*:*:*:*:* (string)

matchCriteriaId : FC1E1F21-9BC7-4ACA-91ED-4D4AECF1672F (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:ge:cimplicity:8.2:sim2:*:*:*:*:*:* (string)

matchCriteriaId : BDB6AC3A-82C8-4C49-8B54-CF6684529CC9 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:ge:cimplicity:8.2:sim20:*:*:*:*:*:* (string)

matchCriteriaId : D4D0541D-E2E1-406F-AF2B-B482C07FD55D (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:ge:cimplicity:8.2:sim21:*:*:*:*:*:* (string)

matchCriteriaId : 5A652C12-24BB-4CF6-9C28-35FE350CF403 (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:ge:cimplicity:8.2:sim22:*:*:*:*:*:* (string)

matchCriteriaId : A6B4ED3A-56E1-439D-8573-16CF442B45FD (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:ge:cimplicity:8.2:sim23:*:*:*:*:*:* (string)

matchCriteriaId : FD9B715D-48C1-4F44-8EE4-C10828B1EE8A (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:ge:cimplicity:8.2:sim24:*:*:*:*:*:* (string)

matchCriteriaId : F33C2217-650A-4969-9006-471D869D63AF (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:a:ge:cimplicity:8.2:sim25:*:*:*:*:*:* (string)

matchCriteriaId : 8331490A-A63D-4903-9CD6-D687EA1F6DA3 (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:a:ge:cimplicity:8.2:sim26:*:*:*:*:*:* (string)

matchCriteriaId : BD71870C-1213-4369-804A-5E67C79C5B1C (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:a:ge:cimplicity:8.2:sim3:*:*:*:*:*:* (string)

matchCriteriaId : 75F41815-D16F-4C29-B1DF-E5F956FD464F (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:a:ge:cimplicity:8.2:sim4:*:*:*:*:*:* (string)

matchCriteriaId : 6BF44E77-00D5-471C-A4AF-E7A905BA299E (string)

vulnerable : true (boolean)

}

22 : { »

criteria : cpe:2.3:a:ge:cimplicity:8.2:sim5:*:*:*:*:*:* (string)

matchCriteriaId : 0995915D-025A-46E6-8E2F-237E33369E75 (string)

vulnerable : true (boolean)

}

23 : { »

criteria : cpe:2.3:a:ge:cimplicity:8.2:sim6:*:*:*:*:*:* (string)

matchCriteriaId : ABBDCBBB-AD6A-4752-9C07-22C4B6494057 (string)

vulnerable : true (boolean)

}

24 : { »

criteria : cpe:2.3:a:ge:cimplicity:8.2:sim7:*:*:*:*:*:* (string)

matchCriteriaId : A0D0F15D-849A-4344-8725-7996CA9DACA5 (string)

vulnerable : true (boolean)

}

25 : { »

criteria : cpe:2.3:a:ge:cimplicity:8.2:sim8:*:*:*:*:*:* (string)

matchCriteriaId : 79494C7A-F9E9-4DBB-A44B-5897948338DC (string)

vulnerable : true (boolean)

}

26 : { »

criteria : cpe:2.3:a:ge:cimplicity:8.2:sim9:*:*:*:*:*:* (string)

matchCriteriaId : 2977EC39-E34B-4A07-98B9-A1F1909332FD (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : General Electric (GE) Digital Proficy HMI/SCADA - CIMPLICITY before 8.2 SIM 27 mishandles service DACLs, which allows local users to modify a service configuration via unspecified vectors. (string)

}

1 : { »

lang : es (string)

value : General Electric (GE) Digital Proficy HMI/SCADA - CIMPLICITY en versiones anteriores a 8.2 SIM 27 no maneja adecuadamente el servicio DACLs, lo que permite a usuarios locales modificar una configuración de servicio a través de vectores no especificados. (string)

}

]

id : CVE-2016-5787 (string)

lastModified : 2025-04-12T10:46:40.837 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : true (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : LOCAL (string)

authentication : NONE (string)

availabilityImpact : PARTIAL (string)

baseScore : 4.6 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : PARTIAL (string)

vectorString : AV:L/AC:L/Au:N/C:P/I:P/A:P (string)

version : 2.0 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 6.4 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : LOW (string)

baseScore : 6.3 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : LOW (string)

privilegesRequired : LOW (string)

scope : CHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L (string)

version : 3.1 (string)

}

exploitabilityScore : 2 (number)

impactScore : 3.7 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2016-07-15T16:59:11.423 (string)

references : [ »

0 : { »

source : ics-cert@hq.dhs.gov (string)

tags : [ »

0 : Broken Link (string)

1 : Third Party Advisory (string)

2 : VDB Entry (string)

]

url : http://www.securityfocus.com/bid/91727 (string)

}

1 : { »

source : ics-cert@hq.dhs.gov (string)

tags : [ »

0 : Permissions Required (string)

1 : Vendor Advisory (string)

]

url : https://ge-ip.force.com/communities/en_US/Article/GE-Digital-Security-Advisory-GED-16-01 (string)

}

2 : { »

source : ics-cert@hq.dhs.gov (string)

tags : [ »

0 : Third Party Advisory (string)

1 : US Government Resource (string)

]

url : https://ics-cert.us-cert.gov/advisories/ICSA-16-194-02 (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Broken Link (string)

1 : Third Party Advisory (string)

2 : VDB Entry (string)

]

url : http://www.securityfocus.com/bid/91727 (string)

}

4 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Permissions Required (string)

1 : Vendor Advisory (string)

]

url : https://ge-ip.force.com/communities/en_US/Article/GE-Digital-Security-Advisory-GED-16-01 (string)

}

5 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Third Party Advisory (string)

1 : US Government Resource (string)

]

url : https://ics-cert.us-cert.gov/advisories/ICSA-16-194-02 (string)

}

]

sourceIdentifier : ics-cert@hq.dhs.gov (string)

vulnStatus : Deferred (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-668 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object