Description
GE CIMPICITY versions 2022 and prior is
vulnerable when data from faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, which could allow an attacker to execute arbitrary code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GE | CIMPLICITY | ≤ v2022 | — |
Advisories 1
- ICSA-22-326-04 GE CIMPLICITY CISA ICS & IT advisories · Nov 22, 2022