What is CVE-2023-0598?

CVE-2023-0598 is a high-severity vulnerability in Ge Ifix, classified under Code Injection. CVSS score: 7.8/10. Published 2023-03-16.

How severe is CVE-2023-0598?

High severity. CVSS v3 base score is 7.8 out of 10.

RCE in Ge Ifix

CVE-2023-0598

GE Digital Proficy iFIX 2022, GE Digital Proficy iFIX v6.1, and GE Digital Proficy iFIX v6.5 are vulnerable to code injection, which may allow an attacker to insert malicious configuration files in the expected web server execution path a…

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.006 (43.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Ge Ifix — versions 6.1, 6.5, 2022
Ge Digital Proficy Ifix — versions 2022 , v6.1 , v6.5

Weakness classification (CWE)

CWE-94 — Code Injection

References

ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory)
ics-cert@hq.dhs.gov (Permissions Required)

Frequently asked questions

What is CVE-2023-0598?: CVE-2023-0598 is a high-severity vulnerability in Ge Ifix, classified under Code Injection. CVSS score: 7.8/10. Published 2023-03-16.
How severe is CVE-2023-0598?: High severity. CVSS v3 base score is 7.8 out of 10.