Skip to content
OpenAdvisories
High ICSA-23-243-02 1 CVE

GE Digital CIMPLICITY

Published Aug 31, 2023 · Updated Aug 31, 2023

Vendor: GE Digital Product: CIMPLICITY

Summary

Successful exploitation of this vulnerability could allow a low-privileged local attacker to escalate privileges to SYSTEM.

Vulnerabilities 1

  • High 7.8
    CVE-2023-4487

    GE Digital CIMPLICITY Process Control

    GE CIMPLICITY 2023 is by a process control vulnerability, which could allow a local attacker to insert malicious configuration files in the expected web server execution path to escalate privileges and gain full control of the HMI software.

    GE Digital CIMPLICITY

Revision history

  1. #1

    Initial Publication

References