CVE-2013-0654: CimWebServer in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Proce...

Security readout for executives and security teams

This vulnerability affects GE Proficy CIMPLICITY deployments using CimWebServer. A remote attacker could send a crafted packet that may run arbitrary commands or crash the service. For operational technology environments, that creates both system-control and availability risk. The source bundle does not provide CVSS scoring, patch details, or evidence of active exploitation. Likely exposure is limited to organizations running GE Proficy CIMPLICITY 4.01 through 8.0 or Proficy Process Systems with CIMPLICITY where CimWebServer is enabled and reachable. Internet or enterprise-zone reachability would increase business risk, but the provided sources do not state typical deployment exposure. Prioritize for OT asset review and remediation planning. The vulnerability is old, but the impact is serious if legacy CIMPLICITY systems remain reachable. Lack of CVSS or exploit evidence lowers certainty, not potential business impact. Mitigation focus: Check GE and US-CERT advisory ICSA-13-022-02 for vendor-approved remediation.; Identify and prioritize affected CIMPLICITY 4.01 through 8.0 deployments.; Limit CimWebServer exposure to required trusted OT networks only..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.