Skip to content

Product

GE Digital CIMPLICITY vulnerabilities

2 published CVES affecting GE Digital CIMPLICITY, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
1
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest GE Digital CIMPLICITY CVEs

Newest publication first

  1. CVE-2023-4487 GE Digital CIMPLICITY Process Control

    Published
    HighCVSS 7.8 EPSS 0.20%

    GE CIMPLICITY 2023 is by a process control vulnerability, which could allow a local attacker to insert malicious configuration files in the expected web server execution path to escalate privileges and gain full control of the HMI software.

  2. CVE-2023-3463 GE Digital CIMPLICITY Heap-based Buffer Overflow

    Published
    CriticalCVSS 9.8 EPSS 0.38%

    All versions of GE Digital CIMPLICITY that are not adhering to SDG guidance and accepting documents from untrusted sources are vulnerable to memory corruption issues due to insufficient input validation, including issues such as out-of-bounds reads and writes, use-after-free, sta...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.