CVE-2022-2002 GE CIMPLICITY Untrusted Pointer Dereference
HighCVSS 7.8
EPSS 0.31%
- Published
- Updated
- Exploit status
- No public exploit known
Description
GE CIMPICITY versions 2022 and prior is
vulnerable when data from faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, which could allow an attacker to execute arbitrary code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ge cimplicity | <= v2022 | No fix listed |
| ge cimplicity | <= 2022 | No fix listed |
References
- www.cisa.gov third-party-advisory us-government-resource