Skip to content
OpenAdvisories

Vendor

GE Digital

8 known vulnerabilities.

6 results · Clear filters · Feed

  • High 7.8

    GE Digital CIMPLICITY Process Control

    GE CIMPLICITY 2023 is by a process control vulnerability, which could allow a local attacker to insert malicious configuration files in the expected web server execution path to escalate privileges and gain full control of the HMI software.

  • High 7.8

    GE Digital Proficy Code Injection

    GE Digital Proficy iFIX 2022, GE Digital Proficy iFIX v6.1, and GE Digital Proficy iFIX v6.5 are vulnerable to code injection, which may allow an attacker to insert malicious configuration files in the expected web server execution path and gain full control …

  • High 7.5

    An unauthorized user with network access and the decryption key could decrypt sensitive data, such as usernames and pas…

  • High 7.5

    An unauthorized user could possibly delete any file on the system.

  • High 7.5

    An unauthorized user could be able to read any file on the system, potentially exposing sensitive information.

  • High 7.5

    An unauthorized user could alter or write files with full control over the path and content of the file.