Skip to content
OpenAdvisories

Vendor

GE Digital

8 known vulnerabilities.

GE Digital at a glance

Last 12 months
0
Critical · all time
1
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

Proficy Historian 5 CIMPLICITY 2 Proficy iFIX 1

Latest advisories

  • High max 7.8
    ICSA-23-243-02 1 CVE

    GE Digital CIMPLICITY

    Successful exploitation of this vulnerability could allow a low-privileged local attacker to escalate privileges to SYSTEM.

    GE Digital
  • Medium max 6.6
    ICSA-23-199-06 1 CVE

    GE Digital CIMPLICITY

    Successful exploitation of this vulnerability could allow an attacker to cause memory corruption issues resulting in unwanted behavior such as code execution.

    GE Digital
  • High max 7.8
    ICSA-23-073-03 1 CVE

    GE iFIX

    Successful exploitation of this vulnerability could allow for privilege escalation and full control of the system.

    GE Digital
  • Critical max 9.8
    ICSA-23-017-01 5 CVEs

    GE Digital Proficy Historian

    Successful exploitation of these vulnerabilities could crash the device after access, cause a buffer overflow condition, and allow remote code execution.

    GE Digital
All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • High 7.8
    CVE-2023-4487

    GE Digital CIMPLICITY Process Control

    GE CIMPLICITY 2023 is by a process control vulnerability, which could allow a local attacker to insert malicious configuration files in the expected web server execution path to escalate privileges and gain full control of the HMI software.

    GE Digital CIMPLICITY
  • Medium 6.6
    CVE-2023-3463

    GE Digital CIMPLICITY Heap-based Buffer Overflow

    All versions of GE Digital CIMPLICITY that are not adhering to SDG guidance and accepting documents from untrusted sources are vulnerable to memory corruption issues due to insufficient input validation, including issues such as out-of-bounds reads and writes…

    GE Digital CIMPLICITY
  • High 7.8
    CVE-2023-0598

    GE Digital Proficy Code Injection

    GE Digital Proficy iFIX 2022, GE Digital Proficy iFIX v6.1, and GE Digital Proficy iFIX v6.5 are vulnerable to code injection, which may allow an attacker to insert malicious configuration files in the expected web server execution path and gain full control …

    GE Digital Proficy iFIX
  • High 7.5
    CVE-2022-38469

    An unauthorized user with network access and the decryption key could decrypt sensitive data, such as usernames and pas…

    GE Digital Proficy Historian
  • High 7.5
    CVE-2022-46331

    An unauthorized user could possibly delete any file on the system.

    GE Digital Proficy Historian
  • High 7.5
    CVE-2022-43494

    An unauthorized user could be able to read any file on the system, potentially exposing sensitive information.

    GE Digital Proficy Historian
  • High 7.5
    CVE-2022-46660

    An unauthorized user could alter or write files with full control over the path and content of the file.

    GE Digital Proficy Historian
  • Critical 9.8
    CVE-2022-46732

    CVE-2022-46732

    Even if the authentication fails for local service authentication, the requested command could still execute regardless of authentication status.

    GE Digital Proficy Historian