Description
GE CIMPLICITY 2023 is by a process control vulnerability, which could allow a local attacker to insert malicious configuration files in the expected web server execution path to escalate privileges and gain full control of the HMI software.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GE Digital | CIMPLICITY | 2023 | — |
Advisories 1
- ICSA-23-243-02 GE Digital CIMPLICITY CISA ICS & IT advisories · Aug 31, 2023