CVE-2014-2355

CVE-2014-2355 describes a privilege escalation vulnerability affecting GE Proficy HMI/SCADA-CIMPLICITY versions 8.2 and earlier, specifically within its CimView and CimEdit components. An attacker could exploit this by crafting a malicious CIMPLICITY screen (.CIM) file. The vulnerability carries a CVSS score of 6.9, indicating a high severity due to its potential for complete compromise (C:C/I:C/A:C) once a user opens the malicious file (AV:L/AC:M). There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.