Description
Exploitation of this vulnerability may result in local privilege escalation and code execution. GE maintains exploitation of this vulnerability is only possible if the attacker has login access to a machine actively running CIMPLICITY, the CIMPLICITY server is not already running a project, and the server is licensed for multiple projects.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| General Electric | Proficy CIMPLICITY | all – ≤ 11.1 | — |
Advisories 1
- ICSA-22-053-01 GE Proficy CIMPLICITY-IPM CISA ICS & IT advisories · Feb 22, 2022