General Electric vulnerabilities
We track 5 vulnerabilities in General Electric products across 3 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on November 7, 2023.
Latest General Electric vulnerabilities
- 7.3 High severity
MiCOM S1 Agile: Uncontrolled Search Path Element
General Electric MiCOM S1 Agile is vulnerable to an attacker achieving code execution by placing malicious DLL files in the directory of the application.
- 9.8 Critical severity
ThingWorx Edge C-SDK: Improper Validation of Array Index
The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code.
- 9.8 Critical severity
ThingWorx Edge C-SDK: Integer Overflow or Wraparound
The affected products are vulnerable to an integer overflow or wraparound, which could allow an attacker to crash the server and remotely execute arbitrary code.
- 7.8 High severity
Proficy CIMPLICITY: Improper Privilege Management
Exploitation of this vulnerability may result in local privilege escalation and code execution. GE maintains exploitation of this vulnerability is only possible if the attacker has login access to a machine actively running CIMPLICITY, the CIMPLICITY server is
- 9.8 Critical severity
Proficy CIMPLICITY: Cleartext Transmission of Sensitive Information
The affected product is vulnerable due to cleartext transmission of credentials seen in the CIMPLICITY network, which can be easily spoofed and used to log in to make operational changes to the system.