GE Digital vulnerabilities
We track 3 vulnerabilities in GE Digital products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 5, 2023.
Latest GE Digital vulnerabilities
- 7.8 High severity
CIMPLICITY: Process Control
GE CIMPLICITY 2023 is by a process control vulnerability, which could allow a local attacker to insert malicious configuration files in the expected web server execution path to escalate privileges and gain full control of the HMI software.
- 9.8 Critical severity
CIMPLICITY: Out-of-bounds Write
All versions of GE Digital CIMPLICITY that are not adhering to SDG guidance and accepting documents from untrusted sources are vulnerable to memory corruption issues due to insufficient input validation, including issues such as out-of-bounds reads and writes,
- 9.8 Critical severity
Proficy iFIX: Improper Control of Generation of Code
GE Digital Proficy iFIX 2022, GE Digital Proficy iFIX v6.1, and GE Digital Proficy iFIX v6.5 are vulnerable to code injection, which may allow an attacker to insert malicious configuration files in the expected web server execution path and gain full control o