Description
GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiRootOptionTable, which could allow an attacker to execute arbitrary code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GE | CIMPLICITY | ≤ v2022 | — |
Advisories 1
- ICSA-22-326-04 GE CIMPLICITY CISA ICS & IT advisories · Nov 22, 2022