Medium severity6.7NVD Advisory· Published Feb 13, 2017· Updated May 13, 2026

CVE-2016-9360

Description

An issue was discovered in General Electric (GE) Proficy HMI/SCADA iFIX Version 5.8 SIM 13 and prior versions, Proficy HMI/SCADA CIMPLICITY Version 9.0 and prior versions, and Proficy Historian Version 6.0 and prior versions. An attacker may be able to retrieve user passwords if he or she has access to an authenticated session.

Affected products

Ge/Historian
cpe:2.3:a:ge:historian:*:*:*:*:*:*:*:*
Range: <=6.0
Ge/Cimplicity
cpe:2.3:a:ge:cimplicity:*:*:*:*:*:*:*:*
Range: <=9.0
Ge/Ifix
cpe:2.3:a:ge:ifix:*:*:*:*:*:*:*:*
Range: <=5.8

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.securityfocus.com/bid/95630nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1037809nvdThird Party AdvisoryVDB Entry
ics-cert.us-cert.gov/advisories/ICSA-16-336-05AnvdMitigationThird Party AdvisoryUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.436
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000