GE CIMPLICITY
view advisory published 2022-11-22
Successful exploitation of these vulnerabilities could crash the device being accessed or allow arbitrary code execution.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-3092US | high7.8 | — | ||
GE CIMPICITY versions 2022 and prior is
vulnerable to an out-of-bounds write, which could allow an attacker to execute arbitrary code.
| ||||
| CVE-2022-3084US | high7.8 | — | ||
GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiRootOptionTable, which could allow an attacker to e… | ||||
| CVE-2022-2952US | high7.8 | — | ||
GE CIMPICITY versions 2022 and prior is
vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, which could allow an attacker to… | ||||
| CVE-2022-2948US | high7.8 | — | ||
GE CIMPICITY versions 2022 and prior is
vulnerable to a heap-based buffer overflow, which could allow an attacker to execute arbitrary code.
| ||||
| CVE-2022-2002US | high7.8 | — | ||
GE CIMPICITY versions 2022 and prior is
vulnerable when data from faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, which could allow an attacker to… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-22-326-04 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (5)
- MitigationCimplicity
For further questions, users should contact GE.
https://digitalsupport.ge.com/communities/CC_Contact - MitigationCimplicity
For further questions, users should contact GE.
https://digitalsupport.ge.com/communities/CC_Contact - MitigationCimplicity
For further questions, users should contact GE.
https://digitalsupport.ge.com/communities/CC_Contact - MitigationCimplicity
For further questions, users should contact GE.
https://digitalsupport.ge.com/communities/CC_Contact - MitigationCimplicity
For further questions, users should contact GE.
https://digitalsupport.ge.com/communities/CC_Contact
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan