Skip to content
OpenAdvisories

Product · GE Digital

CIMPLICITY

2 known vulnerabilities.

CIMPLICITY at a glance

Last 12 months
0
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Most common weaknesses

Latest advisories

  • High max 7.8
    ICSA-23-243-02 1 CVE

    GE Digital CIMPLICITY

    Successful exploitation of this vulnerability could allow a low-privileged local attacker to escalate privileges to SYSTEM.

    GE Digital
  • Medium max 6.6
    ICSA-23-199-06 1 CVE

    GE Digital CIMPLICITY

    Successful exploitation of this vulnerability could allow an attacker to cause memory corruption issues resulting in unwanted behavior such as code execution.

    GE Digital
All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.8
    CVE-2023-4487

    GE Digital CIMPLICITY Process Control

    GE CIMPLICITY 2023 is by a process control vulnerability, which could allow a local attacker to insert malicious configuration files in the expected web server execution path to escalate privileges and gain full control of the HMI software.

    GE Digital CIMPLICITY
  • Medium 6.6
    CVE-2023-3463

    GE Digital CIMPLICITY Heap-based Buffer Overflow

    All versions of GE Digital CIMPLICITY that are not adhering to SDG guidance and accepting documents from untrusted sources are vulnerable to memory corruption issues due to insufficient input validation, including issues such as out-of-bounds reads and writes…

    GE Digital CIMPLICITY