GE CIMPLICITY (Update A)
ATTENTION: Remotely exploitable/low skill level to exploit.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-12732US | medium6.8 | — | ||
A Stack-based Buffer Overflow issue was discovered in GE CIMPLICITY Versions 9.0 and prior. A function reads a packet to indicate the next packet length. The next packet length is… | ||||
references
External citations — patches, advisories, analysis.
remediations (1)
- FixedCimplicity
GE has released CIMPLICITY software Version 9.5 and they recommend that users update to that version or the latest version. The Series 90 TCP/IP communications support has been deprecated and users are encouraged to use the “convert to triplex” application tool, which has been available since CIMPLICITY Version 6.1, to obtain communication support if needed. Documentation and information on procedures, as well as the upgrade to Version 9.5, can be located at the following location (login required):
https://digitalsupport.ge.com/communities/CC_Contact
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan