Lucene search
+L

181 matches found

Cvelist
Cvelist
•added 2022/12/07 11:00 p.m.•46 views

CVE-2022-3084 GE CIMPLICITY Access of Uninitialized Pointer

GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiRootOptionTable, which could allow an attacker to execute arbitrary code...

7.8CVSS8AI score0.00242EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2022/12/07 11:00 p.m.•10 views

CVE-2022-3084 GE CIMPLICITY Access of Uninitialized Pointer

GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiRootOptionTable, which could allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.00242EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2022/12/07 10:59 p.m.•17 views

CVE-2022-2952 GE CIMPLICITY Access of Uninitialized Pointer

GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, which could allow an attacker to execute arbitrary code...

7.8CVSS7.8AI score0.00242EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/12/07 10:59 p.m.•40 views

CVE-2022-2952 GE CIMPLICITY Access of Uninitialized Pointer

GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, which could allow an attacker to execute arbitrary code...

7.8CVSS8AI score0.00242EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/12/07 10:58 p.m.•31 views

CVE-2022-2948 GE CIMPLICITY Heap-based Buffer Overflow

GE CIMPICITY versions 2022 and prior is vulnerable to a heap-based buffer overflow, which could allow an attacker to execute arbitrary code...

7.8CVSS8.1AI score0.0025EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/12/07 10:56 p.m.•42 views

CVE-2022-2002 GE CIMPLICITY Untrusted Pointer Dereference

GE CIMPICITY versions 2022 and prior is vulnerable when data from faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, which could allow an attacker to execute arbitrary code...

7.8CVSS8.1AI score0.00308EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2022/12/07 10:56 p.m.•42 views

CVE-2022-2002 GE CIMPLICITY Untrusted Pointer Dereference

GE CIMPICITY versions 2022 and prior is vulnerable when data from faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, which could allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.00308EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/11/25 12:00 a.m.•99 views

GE CIMPLICITY HMI/SCADA Software Buffer Overflow Vulnerability

GE CIMPLICITY HMI/SCADA Software is an automated industrial platform from General Electric GE. It provides true client-server visualization and control from a single machine to plant locations around the world, helping to manage operations and improve decision making. A buffer overflow...

7.8CVSS7.8AI score0.0025EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/11/25 12:00 a.m.•88 views

GE CIMPLICITY HMI/SCADA Software has an unspecified vulnerability

GE CIMPLICITY HMI/SCADA Software is an automation industrial platform from General Electric GE, Inc. It provides true client-server visualization and control from a single machine to plant locations around the world to help manage operations and improve decision making.GE CIMPLICITY HMI/SCADA...

2.6AI score0.00242EPSS
SaveExploits0
CNNVD
CNNVD
•added 2022/11/23 12:00 a.m.•18 views

GE CIMPLICITY HMI/SCADA Software 缓冲区错误漏洞

GE CIMPLICITY HMI/SCADA Software is an automated industrial platform from General Electric GE. It provides true client-server visualization and control from a single machine to plant locations around the world to help manage operations and improve decision making. A buffer error vulnerability...

7.8CVSS7.9AI score0.00242EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/11/23 12:00 a.m.•22 views

GE CIMPLICITY HMI/SCADA Software 缓冲区错误漏洞

GE CIMPLICITY HMI/SCADA Software is an automated industrial platform from General Electric GE. It provides true client-server visualization and control from a single machine to plant locations around the world to help manage operations and improve decision making. A security vulnerability exists ...

7.8CVSS7.7AI score0.00236EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/11/23 12:00 a.m.•17 views

GE CIMPLICITY HMI/SCADA Software 安全漏洞

GE CIMPLICITY HMI/SCADA Software is an automated industrial platform from General Electric GE. It provides true client-server visualization and control from a single machine to plant locations around the world, helping to manage operations and improve decision making. A buffer overflow...

7.8CVSS7.2AI score0.0025EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/11/23 12:00 a.m.•18 views

GE CIMPLICITY HMI/SCADA Software 缓冲区错误漏洞

GE CIMPLICITY HMI/SCADA Software is an automation industrial platform from General Electric GE, Inc. It provides true client-server visualization and control from a single machine to plant locations around the world to help manage operations and improve decision making.GE CIMPLICITY HMI/SCADA...

7.8CVSS6.8AI score0.00242EPSS
SaveExploits0References4
ICS
ICS
•added 2022/11/22 12:00 a.m.•57 views

GE CIMPLICITY

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: GE Equipment: CIMPLICITY Vulnerabilities: Access of Uninitialized Pointer, Heap-based Buffer Overflow, Untrusted Pointer Dereference, Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of these vulnerabilities...

7.8CVSS8.3AI score0.00308EPSS
SaveExploits0References5
NCSC
NCSC
•added 2022/09/30 12:00 a.m.•10 views

Vulnerabilities found in GE Cimplicity

The Zero Day Initiative has published information about vulnerabilities in GE's Cimplicity have been published. The vulnerabilities occur during the processing of CIM files. Due to lack of proper initialization of the pointer, a malicious party can execute arbitrary code execute arbitrary code...

7.5AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2022/09/29 12:00 a.m.•20 views

(0Day) GE CIMPLICITY CIM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GE CIMPLICITY. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CIM...

7.8CVSS6.2AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2022/09/29 12:00 a.m.•19 views

(0Day) GE CIMPLICITY CIM File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GE CIMPLICITY. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CIM...

7.8CVSS5.2AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2022/09/29 12:00 a.m.•18 views

(0Day) GE CIMPLICITY CIM File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GE CIMPLICITY. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CIM...

7.8CVSS6.3AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2022/09/29 12:00 a.m.•21 views

(0Day) GE CIMPLICITY CIM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GE CIMPLICITY. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CIM...

7.8CVSS4.8AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2022/09/29 12:00 a.m.•18 views

(0Day) GE CIMPLICITY CIM File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GE CIMPLICITY. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CIM...

7.8CVSS6.3AI score
SaveExploits0
Rows per page
Query Builder