CVE-2022-2002 GE CIMPLICITY Untrusted Pointer Dereference

GE CIMPICITY versions 2022 and prior is vulnerable when data from faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, which could allow an attacker to execute arbitrary code...

CVE-2022-2002 GE CIMPLICITY Untrusted Pointer Dereference

GE CIMPICITY versions 2022 and prior is vulnerable when data from faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, which could allow an attacker to execute arbitrary code...

CVE-2022-2002

CVE-2022-2002 affects GE CIMPLICITY (versions 2022 and prior). The issue is an untrusted pointer dereference in gmmiObj!CGmmiOptionContainer that could allow arbitrary code execution. The CVSS v3.1 base score is 7.8 (HIGH), with LOCAL attack vector and user interaction required. Public exploitati...

PT-2022-19644 · Ge · Ge Cimpicity

Name of the Vulnerable Software and Affected Versions: GE CIMPICITY versions 2022 and prior Description: The issue is a heap-based buffer overflow that could allow an attacker to execute arbitrary code. Recommendations: For GE CIMPICITY versions 2022 and prior, at the moment, there is no...

PT-2022-20380 · Ge · Ge Cimpicity

Name of the Vulnerable Software and Affected Versions: GE CIMPICITY versions 2022 and prior Description: The issue is related to an out-of-bounds write, which could allow an attacker to execute arbitrary code. Recommendations: For GE CIMPICITY versions 2022 and prior, at the moment, there is no...

PT-2022-19675 · Ge · Ge Cimpicity

Name of the Vulnerable Software and Affected Versions: GE CIMPICITY versions 2022 and prior Description: The issue arises when data from a faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, potentially allowing an attacker to execute arbitrary code. Recommendations: For...

PT-2022-14266 · Ge · Ge Cimpicity

Name of the Vulnerable Software and Affected Versions: GE CIMPICITY versions 2022 and prior Description: The issue arises when data from a faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, potentially allowing an attacker to execute arbitrary code. Recommendations: For...

PT-2022-20354 · Ge · Ge Cimpicity

Name of the Vulnerable Software and Affected Versions: GE CIMPICITY versions 2022 and prior Description: The issue arises when data from a faulting address controls code flow starting at gmmiObj!CGmmiRootOptionTable, potentially allowing an attacker to execute arbitrary code. Recommendations: For...

CVE-2022-2948: Heap-based Buffer Overflow

GE CIMPICITY versions 2022 and prior is vulnerable to a heap-based buffer overflow, which could allow an attacker to execute arbitrary code...

CVE-2022-3084: Access of Uninitialized Pointer

GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiRootOptionTable, which could allow an attacker to execute arbitrary code...

CVE-2022-3092: Out-of-bounds Write

GE CIMPICITY versions 2022 and prior is vulnerable to an out-of-bounds write, which could allow an attacker to execute arbitrary code...

CVE-2022-2002: Untrusted Pointer Dereference

GE CIMPICITY versions 2022 and prior is vulnerable when data from faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, which could allow an attacker to execute arbitrary code...

CVE-2022-2952: Access of Uninitialized Pointer

GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, which could allow an attacker to execute arbitrary code...

D-Link DVG-G5402SP 操作系统命令注入漏洞

The D-Link DVG-G5402SP is a wireless router from China-based AUO D-Link. An operating system command injection vulnerability exists in the D-Link DVG-G5402SP firmware version GE1.03, which stems from its Maintenance function that allows an attacker to implement command injection...

ge-helio.fr Cross Site Scripting vulnerability OBB-3075349

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GE CIMPLICITY HMI/SCADA Software has an unspecified vulnerability

GE CIMPLICITY HMI/SCADA Software is an automation industrial platform from General Electric GE, Inc. It provides true client-server visualization and control from a single machine to plant locations around the world to help manage operations and improve decision making.GE CIMPLICITY HMI/SCADA...

GE CIMPLICITY HMI/SCADA Software Buffer Overflow Vulnerability

GE CIMPLICITY HMI/SCADA Software is an automated industrial platform from General Electric GE. It provides true client-server visualization and control from a single machine to plant locations around the world, helping to manage operations and improve decision making. A buffer overflow...

GE MDS PulseNET XML External Entity Expansion (CVE-2018-10613)

An XML external entity expansion vulnerability exists in GE MDS PulseNET. Successful exploitation of this vulnerability could result in the disclosure of file contents from the target system...

GE CIMPLICITY HMI/SCADA Software 缓冲区错误漏洞

GE CIMPLICITY HMI/SCADA Software is an automated industrial platform from General Electric GE. It provides true client-server visualization and control from a single machine to plant locations around the world to help manage operations and improve decision making. A security vulnerability exists ...

GE CIMPLICITY

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: GE Equipment: CIMPLICITY Vulnerabilities: Access of Uninitialized Pointer, Heap-based Buffer Overflow, Untrusted Pointer Dereference, Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of these vulnerabilities...