What is CVE-2023-3463?

CVE-2023-3463 is a medium-severity vulnerability in Ge Cimplicity, classified under Heap-based Buffer Overflow. CVSS score: 6.6/10. Published 2023-07-19.

How severe is CVE-2023-3463?

Medium severity. CVSS v3 base score is 6.6 out of 10.

Buffer overflow in Ge Cimplicity

CVE-2023-3463

All versions of GE Digital CIMPLICITY that are not adhering to SDG guidance and accepting documents from untrusted sources are vulnerable to memory corruption issues due to insufficient input validation, including issues such as out-of-bo…

Vulnerability class: Buffer Overflow

EPSS: 0.004 (30.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.6 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H.

Affected products

Ge Cimplicity
Ge Digital Cimplicity — versions All

Weakness classification (CWE)

CWE-122 — Heap-based Buffer Overflow
CWE-787 — Out-of-bounds Write

References

ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory)

Frequently asked questions

What is CVE-2023-3463?: CVE-2023-3463 is a medium-severity vulnerability in Ge Cimplicity, classified under Heap-based Buffer Overflow. CVSS score: 6.6/10. Published 2023-07-19.
How severe is CVE-2023-3463?: Medium severity. CVSS v3 base score is 6.6 out of 10.