{"uuid": "3e0c0c42-dea0-41ee-aefd-371e17b62874", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0653", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/scada/ge_proficy_substitute_traversal.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Unknown\", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module abuses a directory traversal in GE Proficy Cimplicity, specifically on the\\n          gefebt.exe component used by the WebView, in order to retrieve arbitrary files with SYSTEM\\n          privileges. This module has been tested successfully on GE Proficy Cimplicity 7.5.\", \"disclosure_date\": \"2013-01-22\", \"fullname\": \"auxiliary/admin/scada/ge_proficy_substitute_traversal\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"GE Proficy Cimplicity WebView substitute.bcl Directory Traversal\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/admin/scada/ge_proficy_substitute_traversal.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"admin/scada/ge_proficy_substitute_traversal\", \"references\": [\"CVE-2013-0653\", \"OSVDB-89490\", \"BID-57505\", \"URL-http://ics-cert.us-cert.gov/advisories/ICSA-13-022-02\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:55.374370Z"}