CVE-2013-0653: Directory traversal vulnerability in substitute.bcl in the WebView CimWeb subsystem in GE Intelligent Platf...

Security readout for executives and security teams

This CVE describes a remote file-read weakness in GE Proficy CIMPLICITY WebView. An attacker able to reach the CimWeb subsystem could read files outside intended directories. For OT environments, that can expose configuration, credentials, or operational information. The supplied sources do not provide a CVSS score or prove active exploitation. Likely exposure is limited to organizations running the named CIMPLICITY versions or Proficy Process Systems with CIMPLICITY, especially where WebView CimWeb is reachable from untrusted networks. The bundle does not identify CPEs, deployment defaults, or internet exposure prevalence. Treat this as high priority where affected CIMPLICITY systems are reachable beyond tightly controlled OT networks. The business risk is sensitive file exposure from SCADA infrastructure, not confirmed operational disruption. Evidence is incomplete, so remediation should be guided by vendor and ICS-CERT advisories. Mitigation focus: Inventory CIMPLICITY 4.01 through 8.0 and Proficy Process Systems with CIMPLICITY deployments.; Review GE and ICS-CERT advisory guidance before production OT changes.; Restrict WebView CimWeb access to trusted networks only..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.