Medium severity6.7NVD Advisory· Published Feb 13, 2017· Updated Jun 17, 2026

CVE-2016-9360

Description

An issue was discovered in General Electric (GE) Proficy HMI/SCADA iFIX Version 5.8 SIM 13 and prior versions, Proficy HMI/SCADA CIMPLICITY Version 9.0 and prior versions, and Proficy Historian Version 6.0 and prior versions. An attacker may be able to retrieve user passwords if he or she has access to an authenticated session.

Affected products

Ge/Cimplicity
cpe:2.3:a:ge:cimplicity:*:*:*:*:*:*:*:*
Range: <=9.0
Ge/Historian
cpe:2.3:a:ge:historian:*:*:*:*:*:*:*:*
Range: <=6.0
Ge/Ifix
cpe:2.3:a:ge:ifix:*:*:*:*:*:*:*:*
Range: <=5.8
General Electric (GE)/Proficy Historianllm-create
Range: <=6.0
General Electric (GE)/Proficy HMI/SCADA iFIXllm-fuzzy
Range: <=5.8 SIM 13
General Electric (GE)/Proficy HMI/SCADA CIMPLICITYllm-fuzzy
Range: <=9.0

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/95630nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1037809nvdThird Party AdvisoryVDB Entry
ics-cert.us-cert.gov/advisories/ICSA-16-336-05AnvdMitigationThird Party AdvisoryUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.436
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000