Ge
129 CVEs across 243 Ge products. Browse Ge vulnerabilities, severities, and proof-of-concept exploits.
Ge products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-6098 | Medium | 5.3 | 2024-08-16 | When performing an online tag generation to devices which communicate using the ControlLogix protocol, a machine-in-the-middle, or a device that is not confi… |
CVE-2023-5909 | High | 7.5 | 2023-11-30 | KEPServerEX does not properly validate certificates from clients which may allow unauthenticated users to connect. |
CVE-2023-5908 | Critical | 9.1 | 2023-11-30 | KEPServerEX is vulnerable to a buffer overflow which may allow an attacker to crash the product being accessed or leak information. |
CVE-2023-0898 | Medium | 5.3 | 2023-11-07 | General Electric MiCOM S1 Agile is vulnerable to an attacker achieving code execution by placing malicious DLL files in the directory of the application. |
CVE-2023-4487 | High | 7.8 | 2023-09-05 | GE CIMPLICITY 2023 is by a process control vulnerability, which could allow a local attacker to insert malicious configuration files in the expected web serve… |
CVE-2023-3463 | Medium | 6.6 | 2023-07-19 | All versions of GE Digital CIMPLICITY that are not adhering to SDG guidance and accepting documents from untrusted sources are vulnerable to memory corruption… |
CVE-2023-1552 | Medium | 6.4 | 2023-04-11 | ToolboxST prior to version 7.10 is affected by a deserialization vulnerability. An attacker with local access to an HMI or who has conducted a social engineeri… |
CVE-2022-2848 | Critical | 9.1 | 2023-03-29 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. Authentication is not require… |
CVE-2022-2825 | Critical | 9.8 | 2023-03-29 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. Authentication is not require… |
CVE-2023-0598 | High | 7.8 | 2023-03-16 | GE Digital Proficy iFIX 2022, GE Digital Proficy iFIX v6.1, and GE Digital Proficy iFIX v6.5 are vulnerable to code injection, which may allow an attacker to… |
CVE-2023-0755 | Critical | 9.8 | 2023-02-23 | The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrar… |
CVE-2023-0754 | Critical | 9.8 | 2023-02-23 | The affected products are vulnerable to an integer overflow or wraparound, which could allow an attacker to crash the server and remotely execute arbitrary c… |
CVE-2022-46732 | Critical | 9.8 | 2023-01-18 | Even if the authentication fails for local service authentication, the requested command could still execute regardless of authentication status. |
CVE-2022-46660 | High | 7.5 | 2023-01-18 | An unauthorized user could alter or write files with full control over the path and content of the file. |
CVE-2022-46331 | High | 7.5 | 2023-01-18 | An unauthorized user could possibly delete any file on the system. |
CVE-2022-43494 | High | 7.5 | 2023-01-18 | An unauthorized user could be able to read any file on the system, potentially exposing sensitive information. |
CVE-2022-38469 | High | 7.5 | 2023-01-18 | An unauthorized user with network access and the decryption key could decrypt sensitive data, such as usernames and passwords. |
CVE-2022-43977 | Critical | 9.8 | 2023-01-17 | An issue was discovered on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0. The debug port accessible via TCP (a qconn service) lacks acces… |
CVE-2022-43976 | Critical | 9.8 | 2023-01-17 | An issue was discovered in FC46-WebBridge on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0. Direct access to the API is possible on TCP p… |
CVE-2022-43975 | High | 7.5 | 2023-01-17 | An issue was discovered in FC46-WebBridge on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0. A vulnerability in the web server allows arbi… |
CVE-2022-24120 | Medium | 4.6 | 2022-12-26 | Certain General Electric Renewable Energy products store cleartext credentials in flash memory. This affects iNET and iNET II before 8.3.0. |
CVE-2022-24119 | Critical | 9.8 | 2022-12-26 | Certain General Electric Renewable Energy products have a hidden feature for unauthenticated remote access to the device configuration shell. This affects iNET… |
CVE-2022-24118 | Critical | 9.1 | 2022-12-26 | Certain General Electric Renewable Energy products allow attackers to use a code to trigger a reboot into the factory default configuration. This affects iNET… |
CVE-2022-24117 | Critical | 9.8 | 2022-12-26 | Certain General Electric Renewable Energy products download firmware without an integrity check. This affects iNET and iNET II before 8.3.0, SD before 6.4.7, T… |
CVE-2022-24116 | Critical | 9.8 | 2022-12-26 | Certain General Electric Renewable Energy products have inadequate encryption strength. This affects iNET and iNET II before 8.3.0. |
CVE-2022-3092 | High | 7.8 | 2022-12-08 | GE CIMPICITY versions 2022 and prior is vulnerable to an out-of-bounds write, which could allow an attacker to execute arbitrary code. |
CVE-2022-3084 | High | 7.8 | 2022-12-08 | GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiRootOptionTable, which could a… |
CVE-2022-2952 | High | 7.8 | 2022-12-07 | GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, which could… |
CVE-2022-2948 | High | 7.8 | 2022-12-07 | GE CIMPICITY versions 2022 and prior is vulnerable to a heap-based buffer overflow, which could allow an attacker to execute arbitrary code. |
CVE-2022-2002 | High | 7.8 | 2022-12-07 | GE CIMPICITY versions 2022 and prior is vulnerable when data from faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, which could… |
CVE-2022-37953 | Medium | 4.7 | 2022-08-25 | An HTTP response splitting vulnerability exists in the AM Gateway Challenge-Response dialog of WorkstationST (<v07.09.15) and could allow an attacker to compro… |
CVE-2022-37952 | Medium | 4.7 | 2022-08-25 | A reflected cross-site scripting (XSS) vulnerability exists in the iHistorian Data Display of WorkstationST (<v07.09.15) could allow an attacker to compromise… |
CVE-2020-36549 | High | 8.8 | 2022-06-17 | A vulnerability classified as critical was found in GE Voluson S8. Affected is the underlying Windows XP operating system. Missing patches might introduce an e… |
CVE-2020-36548 | Medium | 5.9 | 2022-06-17 | A vulnerability classified as problematic has been found in GE Voluson S8. Affected is the file /uscgi-bin/users.cgi of the Service Browser. The manipulation l… |
CVE-2020-36547 | Medium | 5.9 | 2022-06-17 | A vulnerability was found in GE Voluson S8. It has been rated as critical. This issue affects the Service Browser which itroduces hard-coded credentials. Attac… |
CVE-2021-44477 | High | 7.5 | 2022-03-25 | GE Gas Power ToolBoxST Version v04.07.05C suffers from an XML external entity (XXE) vulnerability using the DTD parameter entities technique that could result… |
CVE-2021-27430 | High | 8.4 | 2022-03-23 | GE UR bootloader binary Version 7.00, 7.01 and 7.02 included unused hardcoded credentials. Additionally, a user with physical access to the UR IED can interrup… |
CVE-2021-27428 | Critical | 9.8 | 2022-03-23 | GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration tool – Enervista UR Setup. This UR Setup tool valida… |
CVE-2021-27426 | Critical | 9.8 | 2022-03-23 | GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the “Factory Mode,” which is used for servicing… |
CVE-2021-27424 | Medium | 5.3 | 2022-03-23 | GE UR firmware versions prior to version 8.1x shares MODBUS memory map as part of the communications guide. GE was made aware a “Last-key pressed” MODBUS regis… |
CVE-2021-27422 | High | 7.5 | 2022-03-23 | GE UR firmware versions prior to version 8.1x web server interface is supported on UR over HTTP protocol. It allows sensitive information exposure without auth… |
CVE-2021-27420 | Medium | 5.3 | 2022-03-23 | GE UR firmware versions prior to version 8.1x web server task does not properly handle receipt of unsupported HTTP verbs, resulting in the web server becoming… |
CVE-2021-27418 | Medium | 5.3 | 2022-03-23 | GE UR firmware versions prior to version 8.1x supports web interface with read-only access. The device fails to properly validate user input, making it possibl… |
CVE-2020-25197 | Critical | 9.8 | 2022-03-18 | A code injection vulnerability exists in one of the webpages in GE Reason RT430, RT431 & RT434 GNSS clocks in firmware versions prior to version 08A06 that cou… |
CVE-2020-25193 | Medium | 5.3 | 2022-03-18 | By having access to the hard-coded cryptographic key for GE Reason RT430, RT431 & RT434 GNSS clocks in firmware versions prior to version 08A06, attackers woul… |
CVE-2022-23921 | High | 7.5 | 2022-02-25 | Exploitation of this vulnerability may result in local privilege escalation and code execution. GE maintains exploitation of this vulnerability is only possibl… |
CVE-2022-21798 | High | 7.5 | 2022-02-25 | The affected product is vulnerable due to cleartext transmission of credentials seen in the CIMPLICITY network, which can be easily spoofed and used to log in… |
CVE-2021-31477 | High | 7.3 | 2021-06-16 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of GE Reason RPV311 14A03. Authentication is not required to exp… |
CVE-2021-27454 | High | 7.8 | 2021-03-25 | The software performs an operation at a privilege level higher than the minimum level required, which creates new weaknesses or amplifies the consequences of o… |
CVE-2021-27452 | High | 7.8 | 2021-03-25 | The software contains a hard-coded password that could allow an attacker to take control of the merging unit using these hard-coded credentials on the MU320E (… |
CVE-2021-27450 | High | 7.8 | 2021-03-25 | SSH server configuration file does not implement some best practices. This could lead to a weakening of the SSH protocol strength, which could lead to addition… |
CVE-2021-27448 | High | 7.8 | 2021-03-25 | A miscommunication in the file system allows adversaries with access to the MU320E to escalate privileges on the MU320E (all firmware versions prior to v04A00… |
CVE-2021-27440 | Critical | 9.8 | 2021-03-25 | The software contains a hard-coded password it uses for its own inbound authentication or for outbound communication to external components on the Reason DR60… |
CVE-2021-27438 | High | 8.8 | 2021-03-25 | The software contains a hard-coded password it uses for its own inbound authentication or for outbound communication to external components on the Reason DR60… |
CVE-2019-18243 | Medium | 5.5 | 2021-02-18 | HMI/SCADA iFIX (Versions 6.1 and prior) allows a local authenticated user to modify system-wide iFIX configurations through the registry. This may allow privil… |
CVE-2019-18255 | Medium | 5.5 | 2021-02-18 | HMI/SCADA iFIX (Versions 6.1 and prior) allows a local authenticated user to modify system-wide iFIX configurations through section objects. This may allow pri… |
CVE-2020-27267 | Critical | 9.1 | 2021-01-14 | KEPServerEX v6.0 to v6.9, ThingWorx Kepware Server v6.8 and v6.9, ThingWorx Industrial Connectivity (all versions), OPC-Aggregator (all versions), Rockwell Aut… |
CVE-2020-27265 | Critical | 9.8 | 2021-01-14 | KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All versions, Rockwell Aut… |
CVE-2020-27263 | Critical | 9.1 | 2021-01-14 | KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All versions, Rockwell Aut… |
CVE-2020-16246 | Medium | 6.1 | 2020-10-20 | The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting (XSS), which may allow attackers to trick users into following a link or navigati… |
CVE-2020-16242 | Medium | 6.1 | 2020-09-25 | The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting (XSS), which may allow an attacker to trick application users into performing cri… |
CVE-2020-16244 | High | 7.2 | 2020-09-23 | GE Digital APM Classic, Versions 4.4 and prior. Salt is not used for hash calculation of passwords, making it possible to decrypt passwords. This design flaw… |
CVE-2020-16240 | Medium | 5.3 | 2020-09-23 | GE Digital APM Classic, Versions 4.4 and prior. An insecure direct object reference (IDOR) vulnerability allows user account data to be downloaded in JavaScrip… |
CVE-2020-12017 | Critical | 9.8 | 2020-06-02 | GE Grid Solutions Reason RT Clocks, RT430, RT431, and RT434, all firmware versions prior to 08A05. The device’s vulnerability in the web application could allo… |
CVE-2020-6992 | Medium | 6.7 | 2020-04-15 | A local privilege escalation vulnerability has been identified in the GE Digital CIMPLICITY HMI/SCADA product v10.0 and prior. If exploited, this vulnerability… |
CVE-2019-13559 | High | 7.8 | 2020-04-07 | GE Mark VIe Controller is shipped with pre-configured hard-coded credentials that may allow root-user access to the controller. A limited application of the af… |
CVE-2019-13554 | High | 8.8 | 2020-04-07 | GE Mark VIe Controller has an unsecured Telnet protocol that may allow a user to create an authenticated session using generic default credentials. GE recommen… |
CVE-2020-6977 | Medium | 6.8 | 2020-02-20 | A restricted desktop environment escape vulnerability exists in the Kiosk Mode functionality of affected devices. Specially crafted inputs can allow the user t… |
CVE-2012-6663 | High | 7.5 | 2020-01-23 | General Electric D20ME devices are not properly configured and reveal plaintext passwords. |
CVE-2019-18267 | Medium | 5.4 | 2019-12-18 | An issue was found in GE S2020/S2020G Fast Switch 61850, S2020/S2020G Fast Switch 61850 Versions 07A03 and prior. An attacker can inject arbitrary Javascript i… |
CVE-2019-10966 | Medium | 5.3 | 2019-07-10 | In GE Aestiva and Aespire versions 7100 and 7900, a vulnerability exists where serial devices are connected via an added unsecured terminal server to a TCP/IP… |
CVE-2019-6566 | High | 7.8 | 2019-05-09 | GE Communicator, all versions prior to 4.0.517, allows a non-administrative user to replace the uninstaller with a malicious version, which could allow an atta… |
CVE-2019-6564 | High | 7.8 | 2019-05-09 | GE Communicator, all versions prior to 4.0.517, allows a non-administrative user to place malicious files within the installer file directory, which may allow… |
CVE-2019-6548 | Critical | 9.8 | 2019-05-09 | GE Communicator, all versions prior to 4.0.517, contains two backdoor accounts with hardcoded credentials, which may allow control over the database. This serv… |
CVE-2019-6546 | High | 7.8 | 2019-05-09 | GE Communicator, all versions prior to 4.0.517, allows an attacker to place malicious files within the working directory of the program, which may allow an att… |
CVE-2019-6544 | Medium | 5.6 | 2019-05-09 | GE Communicator, all versions prior to 4.0.517, has a service running with system privileges that may allow an unprivileged user to perform certain administrat… |
CVE-2018-19003 | High | 7.5 | 2018-12-14 | GE Mark VIe, EX2100e, EX2100e_Reg, and LS2100e Versions 03.03.28C to 05.02.04C, EX2100e All versions prior to v04.09.00C, EX2100e_Reg All versions prior to v04… |
CVE-2018-15362 | Critical | 9.1 | 2018-12-07 | XXE in GE Proficy Cimplicity GDS versions 9.0 R2, 9.5, 10.0 |
CVE-2018-17925 | Medium | 4.8 | 2018-10-10 | Multiple instances of this vulnerability (Unsafe ActiveX Control Marked Safe For Scripting) have been identified in the third-party ActiveX object provided to… |
CVE-2017-7908 | High | 7.6 | 2018-10-02 | A heap-based buffer overflow exists in the third-party product Gigasoft, v5 and prior, included in GE Communicator 3.15 and prior. A malicious HTML file that l… |
CVE-2018-10615 | High | 8.1 | 2018-06-04 | Directory traversal may lead to files being exfiltrated or deleted on the GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior host platform. |
CVE-2018-10613 | High | 7.5 | 2018-06-04 | Multiple variants of XML External Entity (XXE) attacks may be used to exfiltrate data from the host Windows platform in GE MDS PulseNET and MDS PulseNET Enterp… |
CVE-2018-10611 | Critical | 9.8 | 2018-06-04 | Java remote method invocation (RMI) input port in GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior may be exploited to allow unauthenticated… |
CVE-2018-8867 | High | 7.5 | 2018-05-18 | In GE PACSystems RX3i CPE305/310 version 9.20 and prior, RX3i CPE330 version 9.21 and prior, RX3i CPE 400 version 9.30 and prior, PACSystems RSTi-EP CPE 100 al… |
CVE-2017-14008 | Critical | 9.8 | 2018-03-20 | GE Centricity PACS RA1000, diagnostic image analysis, all current versions are affected these devices use default or hard-coded credentials. Successful exploit… |
CVE-2017-14006 | Critical | 9.8 | 2018-03-20 | GE Xeleris versions 1.0,1.1,2.1,3.0,3.1, medical imaging systems, all current versions are affected, these devices use default or hard-coded credentials. Succe… |
CVE-2017-14004 | Critical | 9.8 | 2018-03-20 | GE GEMNet License server (EchoServer) all current versions are affected these devices use default or hard-coded credentials. Successful exploitation of this vu… |
CVE-2017-14002 | Critical | 9.8 | 2018-03-20 | GE Infinia/Infinia with Hawkeye 4 medical imaging systems all current versions are affected these devices use default or hard-coded credentials. Successful exp… |
CVE-2018-5475 | Critical | 9.8 | 2018-02-19 | A Stack-based Buffer Overflow issue was discovered in GE D60 Line Distance Relay devices running firmware Version 7.11 and prior. Multiple stack-based buffer o… |
CVE-2018-5473 | Critical | 9.8 | 2018-02-19 | An Improper Restriction of Operations within the Bounds of a Memory Buffer issue was discovered in GE D60 Line Distance Relay devices running firmware Version… |
CVE-2017-12732 | Medium | 6.8 | 2017-10-05 | A Stack-based Buffer Overflow issue was discovered in GE CIMPLICITY Versions 9.0 and prior. A function reads a packet to indicate the next packet length. The n… |
CVE-2015-3976 | Medium | 5.4 | 2017-08-28 | Cross-site scripting (XSS) vulnerability in GE Multilink ML810/3000/3100 series switch 5.2.0 and earlier, and GE Multilink ML800/1200/1600/2400 4.2.1 and earli… |
CVE-2017-7905 | Critical | 9.8 | 2017-06-30 | A Weak Cryptography for Passwords issue was discovered in General Electric (GE) Multilin SR 750 Feeder Protection Relay, firmware versions prior to Version 7.4… |
CVE-2016-9360 | Medium | 6.7 | 2017-02-13 | An issue was discovered in General Electric (GE) Proficy HMI/SCADA iFIX Version 5.8 SIM 13 and prior versions, Proficy HMI/SCADA CIMPLICITY Version 9.0 and pri… |
CVE-2016-5788 | Critical | 10.0 | 2016-11-25 | General Electric (GE) Bently Nevada 3500/22M USB with firmware before 5.0 and Bently Nevada 3500/22M Serial have open ports, which makes it easier for remote a… |
CVE-2016-5787 | Medium | 6.3 | 2016-07-15 | General Electric (GE) Digital Proficy HMI/SCADA - CIMPLICITY before 8.2 SIM 27 mishandles service DACLs, which allows local users to modify a service configura… |
CVE-2016-2310 | Critical | 9.8 | 2016-06-09 | General Electric (GE) Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware before 5.5.0 and ML810, ML3000, and ML3100 switches with firmware befo… |
CVE-2016-0862 | Medium | 6.5 | 2016-02-05 | General Electric (GE) Industrial Solutions UPS SNMP/Web Adapter devices with firmware before 4.8 allow remote authenticated users to obtain sensitive cleartext… |
CVE-2016-0861 | High | 8.8 | 2016-02-05 | General Electric (GE) Industrial Solutions UPS SNMP/Web Adapter devices with firmware before 4.8 allow remote authenticated users to execute arbitrary commands… |
CVE-2015-6459 | | 2015-09-18 | Absolute path traversal vulnerability in the download feature in FileDownloadServlet in GE Digital Energy MDS PulseNET and MDS PulseNET Enterprise before 3.1.5… |