CIMPLICITY vulnerabilities

2 known vulnerabilities in CIMPLICITY from GE Digital. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  CIMPLICITY: Process Control

  CVE-2023-4487Sep 5, 2023GE Digital

  GE CIMPLICITY 2023 is by a process control vulnerability, which could allow a local attacker to insert malicious configuration files in the expected web server execution path to escalate privileges and gain full control of the HMI software.

• 9.8 Critical severity

  CIMPLICITY: Out-of-bounds Write

  CVE-2023-3463Jul 19, 2023GE Digital

  All versions of GE Digital CIMPLICITY that are not adhering to SDG guidance and accepting documents from untrusted sources are vulnerable to memory corruption issues due to insufficient input validation, including issues such as out-of-bounds reads and writes,