Skip to content
OpenAdvisories
High ICSA-22-326-04 5 CVEs

GE CIMPLICITY

Published Nov 22, 2022 · Updated Nov 22, 2022

Vendor: General Electric (GE) Product: CIMPLICITY

Summary

Successful exploitation of these vulnerabilities could crash the device being accessed or allow arbitrary code execution.

Vulnerabilities 5

  • High 7.8
    CVE-2022-2002

    GE CIMPLICITY Untrusted Pointer Dereference

    GE CIMPICITY versions 2022 and prior is vulnerable when data from faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, which could allow an attacker to execute arbitrary code.

    GE CIMPLICITY
  • High 7.8
    CVE-2022-2948

    GE CIMPLICITY Heap-based Buffer Overflow

    GE CIMPICITY versions 2022 and prior is vulnerable to a heap-based buffer overflow, which could allow an attacker to execute arbitrary code.

    GE CIMPLICITY
  • High 7.8
    CVE-2022-2952

    GE CIMPLICITY Access of Uninitialized Pointer

    GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, which could allow an attacker to execute arbitrary code.

    GE CIMPLICITY
  • High 7.8
    CVE-2022-3084

    GE CIMPLICITY Access of Uninitialized Pointer

    GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiRootOptionTable, which could allow an attacker to execute arbitrary code.

    GE CIMPLICITY
  • High 7.8
    CVE-2022-3092

    GE CIMPLICITY Out-of-bounds Write

    GE CIMPICITY versions 2022 and prior is vulnerable to an out-of-bounds write, which could allow an attacker to execute arbitrary code.

    GE CIMPLICITY

Revision history

  1. #1

    Publication Date

References