cimplicity vulnerabilities and fixes

Recent CVEs affecting cimplicity, with upgrade or downgrade steps. 11 tracked.

cimplicity has 11 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 7. Most recent: 2023-09-05. Highest priority: CVE-2018-15362 (score 58/100).

• CVE-2023-4487 HIGH 7.8 DOWNGRADE GE CIMPLICITY 2023 is by a process control vulnerability, which could allow a local attacker to insert malici
• CVE-2023-3463 MEDIUM 6.6 MITIGATE All versions of GE Digital CIMPLICITY that are not adhering to SDG guidance and accepting documents from untr
• CVE-2022-3092 HIGH 7.8 UPGRADE GE CIMPICITY versions 2022 and prior is vulnerable to an out-of-bounds write, which could allow an attac
• CVE-2022-3084 HIGH 7.8 UPGRADE GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starti
• CVE-2022-2952 HIGH 7.8 UPGRADE GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow star
• CVE-2022-2948 HIGH 7.8 UPGRADE GE CIMPICITY versions 2022 and prior is vulnerable to a heap-based buffer overflow, which could allow an att
• CVE-2022-2002 HIGH 7.8 UPGRADE GE CIMPICITY versions 2022 and prior is vulnerable when data from faulting address controls code flow star
• CVE-2022-21798 HIGH 7.5 MITIGATE The affected product is vulnerable due to cleartext transmission of credentials seen in the CIMPLICITY network
• CVE-2020-6992 MEDIUM 6.7 UPGRADE A local privilege escalation vulnerability has been identified in the GE Digital CIMPLICITY HMI/SCADA product
• CVE-2018-15362 CRITICAL 9.1 DOWNGRADE XXE in GE Proficy Cimplicity GDS versions 9.0 R2, 9.5, 10.0
• CVE-2016-9360 MEDIUM 6.7 UPGRADE UPGRADE An issue was discovered in General Electric (GE) Proficy HMI/SCADA iFIX Version 5.8 SIM 13 and prior versions,

FAQ

How do I fix cimplicity vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is cimplicity being exploited right now?

None of the tracked cimplicity CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which cimplicity CVE should I patch first?

CVE-2018-15362 currently ranks highest (58/100): XXE in GE Proficy Cimplicity GDS versions 9.0 R2, 9.5, 10.0.

RSS feed for cimplicity · ← Back to latest CVEs