CVE-2022-21798

CVE-2022-21798 affects GE Proficy CIMPLICITY (CIMPLICITY HMI/SCADA). The vulnerability is “cleartext transmission of credentials” inside the CIMPLICITY network, which can be spoofed to log in and make operational changes. CVSSv3.1 base score 9.8 (CRITICAL) with network access, low attack complexi...

CVE-2022-21798 ICSA-22-053-02 GE Proficy CIMPLICITY-Cleartext

The affected product is vulnerable due to cleartext transmission of credentials seen in the CIMPLICITY network, which can be easily spoofed and used to log in to make operational changes to the system...