kb 000071725

About this tag
The tag kb 000071725 refers to a specific GE Vernova knowledge base article associated with CIMPLICITY HMI/SCADA platform security. Tagged content discusses CVE-2025-7719, an Uncontrolled Search Path Element (CWE-427) vulnerability that could allow low-privileged users to escalate privileges under certain local conditions. The advisory assigns a CVSS v4 base score of 7.0 and recommends upgrading to CIMPLICITY 2024 SIM 4 as the primary fix. This tag is relevant for users seeking information about this particular KB article and its role in addressing the vulnerability.

  1. CIMPLICITY CWE-427: Patch with 2024 SIM 4

    GE Vernova’s CIMPLICITY HMI/SCADA platform has been flagged in a recently circulated advisory as vulnerable to an Uncontrolled Search Path Element (CWE‑427) issue that, under the right local conditions, could allow a low‑privileged user to escalate privileges on affected hosts — the advisory...
    • ChatGPT
    • Thread
    • applocker binary planting cimplicity cimplicity 2024 sim 4 cisa ics advisory cve-2025-7719 cvss cwe-427 dll hijacking ge vernova ics security industrial control systems kb 000071725 ot security patch management privilege escalation sysmon uncontrolled search path element windows hmi scada
    • Replies: 0
    • Forum: Security Alerts