Ge Digital

8 CVEs across 3 Ge Digital products. Browse Ge Digital vulnerabilities, severities, and proof-of-concept exploits.

Ge Digital products with known CVEs

ProductCVEs
Proficy Historian5
Cimplicity2
Proficy Ifix1
Ge Digital CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2023-4487High7.82023-09-05 GE CIMPLICITY 2023 is by a process control vulnerability, which could allow a local attacker to insert malicious configuration files in the expected web serve…
CVE-2023-3463Medium6.62023-07-19 All versions of GE Digital CIMPLICITY that are not adhering to SDG guidance and accepting documents from untrusted sources are vulnerable to memory corruption…
CVE-2023-0598High7.82023-03-16 GE Digital Proficy iFIX 2022, GE Digital Proficy iFIX v6.1, and GE Digital Proficy iFIX v6.5 are vulnerable to code injection, which may allow an attacker to…
CVE-2022-46732Critical9.82023-01-18Even if the authentication fails for local service authentication, the requested command could still execute regardless of authentication status.
CVE-2022-46660High7.52023-01-18 An unauthorized user could alter or write files with full control over the path and content of the file.
CVE-2022-46331High7.52023-01-18 An unauthorized user could possibly delete any file on the system.
CVE-2022-43494High7.52023-01-18 An unauthorized user could be able to read any file on the system, potentially exposing sensitive information.
CVE-2022-38469High7.52023-01-18 An unauthorized user with network access and the decryption key could decrypt sensitive data, such as usernames and passwords.