Ge Cimplicity
12 CVEs affecting Ge Cimplicity. Latest disclosed: 2023-09-05. Critical: 1, High: 7.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-15362 | Critical | 9.1 | 2018-12-07 | XXE in GE Proficy Cimplicity GDS versions 9.0 R2, 9.5, 10.0 |
CVE-2023-4487 | High | 7.8 | 2023-09-05 | GE CIMPLICITY 2023 is by a process control vulnerability, which could allow a local attacker to insert malicious configuration files in the expected web serve… |
CVE-2022-3092 | High | 7.8 | 2022-12-08 | GE CIMPICITY versions 2022 and prior is vulnerable to an out-of-bounds write, which could allow an attacker to execute arbitrary code. |
CVE-2022-3084 | High | 7.8 | 2022-12-08 | GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiRootOptionTable, which could a… |
CVE-2022-2952 | High | 7.8 | 2022-12-07 | GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, which could… |
CVE-2022-2948 | High | 7.8 | 2022-12-07 | GE CIMPICITY versions 2022 and prior is vulnerable to a heap-based buffer overflow, which could allow an attacker to execute arbitrary code. |
CVE-2022-2002 | High | 7.8 | 2022-12-07 | GE CIMPICITY versions 2022 and prior is vulnerable when data from faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, which could… |
CVE-2022-21798 | High | 7.5 | 2022-02-25 | The affected product is vulnerable due to cleartext transmission of credentials seen in the CIMPLICITY network, which can be easily spoofed and used to log in… |
CVE-2020-6992 | Medium | 6.7 | 2020-04-15 | A local privilege escalation vulnerability has been identified in the GE Digital CIMPLICITY HMI/SCADA product v10.0 and prior. If exploited, this vulnerability… |
CVE-2016-9360 | Medium | 6.7 | 2017-02-13 | An issue was discovered in General Electric (GE) Proficy HMI/SCADA iFIX Version 5.8 SIM 13 and prior versions, Proficy HMI/SCADA CIMPLICITY Version 9.0 and pri… |
CVE-2023-3463 | Medium | 6.6 | 2023-07-19 | All versions of GE Digital CIMPLICITY that are not adhering to SDG guidance and accepting documents from untrusted sources are vulnerable to memory corruption… |
CVE-2016-5787 | Medium | 6.3 | 2016-07-15 | General Electric (GE) Digital Proficy HMI/SCADA - CIMPLICITY before 8.2 SIM 27 mishandles service DACLs, which allows local users to modify a service configura… |