Proficy HMI/SCADA-CIMPLICITY is a client/server-based HMI/SCADA application. The affected product, Proficy HMI/SCADA iFIX, is a HMI/SCADA application. GE is a US-based company that maintains offices in several countries around the world.

NCCIC/ICS-CERT recommends that organizations evaluate the impact of this vulnerability based on their operational environment, architecture, and product implementation. Impact to individual organizations depends on many factors that are unique to each organization. Successful exploitation of this vulnerability may allow an attacker to retrieve user passwords. Proficy Historian Version 6.0 and prior versions.Proficy HMI/SCADA CIMPLICITY Version 9.0 and prior versions, and.Proficy HMI/SCADA iFIX Version 5.8 SIM 13 and prior versions,.GE has produced new versions to mitigate this vulnerability. This vulnerability was identified by Ilya Karpov of Positive Technologies. GE has reported an insufficiently protected credentials vulnerability in Proficy Human-Machine Interface/Supervisory Control and Data Acquisition (HMI/SCADA) iFIX, Proficy HMI/SCADA CIMPLICITY, and Proficy Historian software. This updated advisory is a follow-up to the updated advisory titled ICSA-16-336-05A GE Proficy HMI/SCADA IFIX, Proficy HMI/SCADA CIMPLICITY, and Proficy Historian Vulnerability that was published January 24, 2017, on the NCCIC/ICS-CERT web site.

Ifix scada sychronization