Proficy CIMPLICITY vulnerabilities

2 known vulnerabilities in Proficy CIMPLICITY from General Electric. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Proficy CIMPLICITY: Improper Privilege Management

  CVE-2022-23921Feb 25, 2022General Electric

  Exploitation of this vulnerability may result in local privilege escalation and code execution. GE maintains exploitation of this vulnerability is only possible if the attacker has login access to a machine actively running CIMPLICITY, the CIMPLICITY server is

• 9.8 Critical severity

  Proficy CIMPLICITY: Cleartext Transmission of Sensitive Information

  CVE-2022-21798Feb 25, 2022General Electric

  The affected product is vulnerable due to cleartext transmission of credentials seen in the CIMPLICITY network, which can be easily spoofed and used to log in to make operational changes to the system.