Skip to content
OpenAdvisories
High ICSA-22-053-02 1 CVE

GE Proficy CIMPLICITY-Cleartext

Published Feb 22, 2022 · Updated Feb 22, 2022

Vendor: General Electric (GE) Product: Proficy CIMPLICITY

Summary

Successful exploitation of this vulnerability could allow an attacker to capture a connection session, resulting in disclosure of sensitive information.

Vulnerabilities 1

  • High 7.5
    CVE-2022-21798

    ICSA-22-053-02 GE Proficy CIMPLICITY-Cleartext

    The affected product is vulnerable due to cleartext transmission of credentials seen in the CIMPLICITY network, which can be easily spoofed and used to log in to make operational changes to the system.

    General Electric Proficy CIMPLICITY

Revision history

  1. #1

    ICSA-22-053-02 GE Digital Proficy CIMPLICITY-Cleartext

References