Is CVE-2014-0750 actively exploited?

A proof-of-concept exploit is publicly available for CVE-2014-0750, but active exploitation has not been confirmed.

Can CVE-2014-0750 be exploited remotely?

Yes. CVE-2014-0750 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2014-0750?

CVE-2014-0750 has a CVSS score of 7.5 (HIGH).

HOME VULNERABILITIESCVE-2014-0750

HIGHPOC

CVE-2014-0750

CWE-22Published: January 25, 2014· Updated: Jun 17, 2026

7.5

CVSS v3.1

Official Description

Directory traversal vulnerability in gefebt.exe in the WebView CimWeb components in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY through 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary code via a crafted HTTP request, aka ZDI-CAN-1622.

NVD Source

Technical Analysis

CVE-2014-0750 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A proof-of-concept (PoC) exploit exists for CVE-2014-0750. While not yet confirmed in active campaigns, the availability of PoC code increases exploitation risk substantially.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges Req.

User Interaction

Scope

Impact

ConfidentialityP

IntegrityP

AvailabilityP

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected Vendors & Products

ge3 product(s)

intelligent platforms proficy hmi\%2fscada cimplicityintelligent platforms proficy hmi\/scada cimplicityintelligent platforms proficy process systems with cimplicity

Source: NVD CPE · 7 total CPE entries