GE CIMPLICITY
Advisory ansehen veröffentlicht 2022-11-22
Successful exploitation of these vulnerabilities could crash the device being accessed or allow arbitrary code execution.
01
beschreibt (5)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-3092US | high7.8 | — | ||
GE CIMPICITY versions 2022 and prior is
vulnerable to an out-of-bounds write, which could allow an attacker to execute arbitrary code.
| ||||
| CVE-2022-3084US | high7.8 | — | ||
GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiRootOptionTable, which could allow an attacker to e… | ||||
| CVE-2022-2952US | high7.8 | — | ||
GE CIMPICITY versions 2022 and prior is
vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, which could allow an attacker to… | ||||
| CVE-2022-2948US | high7.8 | — | ||
GE CIMPICITY versions 2022 and prior is
vulnerable to a heap-based buffer overflow, which could allow an attacker to execute arbitrary code.
| ||||
| CVE-2022-2002US | high7.8 | — | ||
GE CIMPICITY versions 2022 and prior is
vulnerable when data from faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, which could allow an attacker to… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-22-326-04 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (5)
- MitigationCimplicity
For further questions, users should contact GE.
https://digitalsupport.ge.com/communities/CC_Contact - MitigationCimplicity
For further questions, users should contact GE.
https://digitalsupport.ge.com/communities/CC_Contact - MitigationCimplicity
For further questions, users should contact GE.
https://digitalsupport.ge.com/communities/CC_Contact - MitigationCimplicity
For further questions, users should contact GE.
https://digitalsupport.ge.com/communities/CC_Contact - MitigationCimplicity
For further questions, users should contact GE.
https://digitalsupport.ge.com/communities/CC_Contact
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan