PatchTheCVE: ge

CVE-2023-5909: KEPServerEX does not properly validate certificates from clients which may allow unauthenticated user

Wed, 17 Jun 2026 06:49:38 +0000

HIGH 7.5: KEPServerEX does not properly validate certificates from clients which may allow unauthenticated users to connect.

CVE-2023-5908: KEPServerEX is vulnerable to a buffer overflow which may allow an attacker to crash the product being acc

Wed, 17 Jun 2026 06:49:38 +0000

CRITICAL 9.1: KEPServerEX is vulnerable to a buffer overflow which may allow an attacker to crash the product being accessed or leak information.

CVE-2023-0898: General Electric MiCOM S1 Agile is vulnerable to an attacker achieving code execution by placing malicious DL

Wed, 17 Jun 2026 05:26:35 +0000

MEDIUM 5.3: General Electric MiCOM S1 Agile is vulnerable to an attacker achieving code execution by placing malicious DLL files in the directory of the application.

CVE-2023-4487: GE CIMPLICITY 2023 is by a process control vulnerability, which could allow a local attacker to insert malici

Wed, 17 Jun 2026 06:37:56 +0000

HIGH 7.8: GE CIMPLICITY 2023 is by a process control vulnerability, which could allow a local attacker to insert malicious configuration files in the expected web server execution path to escalate privileges and gain full control of the HMI software.

CVE-2023-3463: All versions of GE Digital CIMPLICITY that are not adhering to SDG guidance and accepting documents from untr

Wed, 17 Jun 2026 06:14:09 +0000

MEDIUM 6.6: All versions of GE Digital CIMPLICITY that are not adhering to SDG guidance and accepting documents from untrusted sources are vulnerable to memory corruption issues due to insufficient input validation, including issues such as out-of-bounds reads and writes, use-after-free, stack-based buffer ove

CVE-2023-1552: ToolboxST prior to version 7.10 is affected by a deserialization vulnerability

Wed, 17 Jun 2026 05:28:14 +0000

MEDIUM 6.4: ToolboxST prior to version 7.10 is affected by a deserialization vulnerability. An attacker with local access to an HMI or who has conducted a social engineering attack on an authorized operator could execute code in a Toolbox user's context through the deserialization of an untrusted configuration

CVE-2022-2848: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPS

Wed, 17 Jun 2026 04:42:41 +0000

CRITICAL 9.1: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of text encoding conversions. The issue results from the lack o

CVE-2022-2825: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPS

Wed, 17 Jun 2026 04:42:39 +0000

CRITICAL 9.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of text encoding conversions. The issue results from the lack o

CVE-2023-0598: GE Digital Proficy iFIX 2022, GE Digital Proficy iFIX v6.1, and GE Digital Proficy iFIX v6.5 are vulnerable t

Wed, 17 Jun 2026 05:25:53 +0000

HIGH 7.8: GE Digital Proficy iFIX 2022, GE Digital Proficy iFIX v6.1, and GE Digital Proficy iFIX v6.5 are vulnerable to code injection, which may allow an attacker to insert malicious configuration files in the expected web server execution path and gain full control of the HMI software.

CVE-2023-0755: The affected products are vulnerable to an improper validation of array index, which could allow an attacker

Wed, 17 Jun 2026 05:26:14 +0000

CRITICAL 9.8: The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code.

CVE-2023-0754: The affected products are vulnerable to an integer overflow or wraparound, which could allow an attacker to

Wed, 17 Jun 2026 05:26:14 +0000

CRITICAL 9.8: The affected products are vulnerable to an integer overflow or wraparound, which could allow an attacker to crash the server and remotely execute arbitrary code.

CVE-2022-46732: Even if the authentication fails for local service authentication, the requested command could still execute r

Wed, 17 Jun 2026 05:12:18 +0000

CRITICAL 9.8: Even if the authentication fails for local service authentication, the requested command could still execute regardless of authentication status.

CVE-2022-46660: An unauthorized user could alter or write files with full control over the path and content of the file

Wed, 17 Jun 2026 05:12:09 +0000

HIGH 7.5: An unauthorized user could alter or write files with full control over the path and content of the file.

CVE-2022-46331: An unauthorized user could possibly delete any file on the system

Wed, 17 Jun 2026 05:11:32 +0000

HIGH 7.5: An unauthorized user could possibly delete any file on the system.

CVE-2022-43494: An unauthorized user could be able to read any file on the system, potentially exposing sensitive informatio

Wed, 17 Jun 2026 05:06:39 +0000

HIGH 7.5: An unauthorized user could be able to read any file on the system, potentially exposing sensitive information.

CVE-2022-38469: An unauthorized user with network access and the decryption key could decrypt sensitive data, such as user

Wed, 17 Jun 2026 04:56:41 +0000

HIGH 7.5: An unauthorized user with network access and the decryption key could decrypt sensitive data, such as usernames and passwords.

CVE-2022-43977: An issue was discovered on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0

Wed, 17 Jun 2026 05:07:35 +0000

CRITICAL 9.8: An issue was discovered on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0. The debug port accessible via TCP (a qconn service) lacks access control.

CVE-2022-43976: An issue was discovered in FC46-WebBridge on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7

Wed, 17 Jun 2026 05:07:34 +0000

CRITICAL 9.8: An issue was discovered in FC46-WebBridge on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0. Direct access to the API is possible on TCP port 8888 via programs located in the cgi-bin folder without any authentication.

CVE-2022-43975: An issue was discovered in FC46-WebBridge on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7

Wed, 17 Jun 2026 05:07:34 +0000

HIGH 7.5: An issue was discovered in FC46-WebBridge on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0. A vulnerability in the web server allows arbitrary files and configurations to be read via directory traversal over TCP port 8888.

CVE-2022-24120: Certain General Electric Renewable Energy products store cleartext credentials in flash memory

Wed, 17 Jun 2026 04:31:20 +0000

MEDIUM 4.6: Certain General Electric Renewable Energy products store cleartext credentials in flash memory. This affects iNET and iNET II before 8.3.0.

CVE-2022-24119: Certain General Electric Renewable Energy products have a hidden feature for unauthenticated remote access to

Wed, 17 Jun 2026 04:31:19 +0000

CRITICAL 9.8: Certain General Electric Renewable Energy products have a hidden feature for unauthenticated remote access to the device configuration shell. This affects iNET and iNET II before 8.3.0.

CVE-2022-24118: Certain General Electric Renewable Energy products allow attackers to use a code to trigger a reboot into the

Wed, 17 Jun 2026 04:31:19 +0000

CRITICAL 9.1: Certain General Electric Renewable Energy products allow attackers to use a code to trigger a reboot into the factory default configuration. This affects iNET and iNET II before 8.3.0, SD before 6.4.7, TD220X before 2.0.16, and TD220MAX before 1.2.6.

CVE-2022-24117: Certain General Electric Renewable Energy products download firmware without an integrity check

Wed, 17 Jun 2026 04:31:19 +0000

CRITICAL 9.8: Certain General Electric Renewable Energy products download firmware without an integrity check. This affects iNET and iNET II before 8.3.0, SD before 6.4.7, TD220X before 2.0.16, and TD220MAX before 1.2.6.

CVE-2022-24116: Certain General Electric Renewable Energy products have inadequate encryption strength

Wed, 17 Jun 2026 04:31:19 +0000

CRITICAL 9.8: Certain General Electric Renewable Energy products have inadequate encryption strength. This affects iNET and iNET II before 8.3.0.

CVE-2022-3092: GE CIMPICITY versions 2022 and prior is vulnerable to an out-of-bounds write, which could allow an attac

Wed, 17 Jun 2026 04:58:50 +0000

HIGH 7.8: GE CIMPICITY versions 2022 and prior is vulnerable to an out-of-bounds write, which could allow an attacker to execute arbitrary code.

CVE-2022-3084: GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starti

Wed, 17 Jun 2026 04:58:47 +0000

HIGH 7.8: GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiRootOptionTable, which could allow an attacker to execute arbitrary code.

CVE-2022-2952: GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow star

Wed, 17 Jun 2026 04:42:52 +0000

HIGH 7.8: GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, which could allow an attacker to execute arbitrary code.

CVE-2022-2948: GE CIMPICITY versions 2022 and prior is vulnerable to a heap-based buffer overflow, which could allow an att

Wed, 17 Jun 2026 04:42:52 +0000

HIGH 7.8: GE CIMPICITY versions 2022 and prior is vulnerable to a heap-based buffer overflow, which could allow an attacker to execute arbitrary code.

CVE-2022-2002: GE CIMPICITY versions 2022 and prior is vulnerable when data from faulting address controls code flow star

Wed, 17 Jun 2026 04:41:06 +0000

HIGH 7.8: GE CIMPICITY versions 2022 and prior is vulnerable when data from faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, which could allow an attacker to execute arbitrary code.

CVE-2022-37953: An HTTP response splitting vulnerability exists in the AM Gateway Challenge-Response dialog of WorkstationST (

Wed, 17 Jun 2026 04:55:45 +0000

MEDIUM 4.7: An HTTP response splitting vulnerability exists in the AM Gateway Challenge-Response dialog of WorkstationST (

CVE-2022-37952: A reflected cross-site scripting (XSS) vulnerability exists in the iHistorian Data Display of WorkstationST (<

Wed, 17 Jun 2026 04:55:45 +0000

MEDIUM 4.7: A reflected cross-site scripting (XSS) vulnerability exists in the iHistorian Data Display of WorkstationST (

CVE-2020-36549: A vulnerability classified as critical was found in GE Voluson S8

Wed, 17 Jun 2026 03:15:42 +0000

HIGH 8.8: A vulnerability classified as critical was found in GE Voluson S8. Affected is the underlying Windows XP operating system. Missing patches might introduce an excessive attack surface. Access to the local network is required for this attack to succeed.

CVE-2020-36548: A vulnerability classified as problematic has been found in GE Voluson S8

Wed, 17 Jun 2026 03:15:42 +0000

MEDIUM 5.9: A vulnerability classified as problematic has been found in GE Voluson S8. Affected is the file /uscgi-bin/users.cgi of the Service Browser. The manipulation leads to improper authentication and elevated access possibilities. It is possible to launch the attack on the local host.

CVE-2020-36547: A vulnerability was found in GE Voluson S8

Wed, 17 Jun 2026 03:15:42 +0000

MEDIUM 5.9: A vulnerability was found in GE Voluson S8. It has been rated as critical. This issue affects the Service Browser which itroduces hard-coded credentials. Attacking locally is a requirement. It is recommended to change the configuration settings.

CVE-2021-44477: GE Gas Power ToolBoxST Version v04.07.05C suffers from an XML external entity (XXE) vulnerability using the DT

Wed, 17 Jun 2026 04:12:24 +0000

HIGH 7.5: GE Gas Power ToolBoxST Version v04.07.05C suffers from an XML external entity (XXE) vulnerability using the DTD parameter entities technique that could result in disclosure and retrieval of arbitrary data on the affected node via an out-of-band (OOB) attack. The vulnerability is triggered when input

CVE-2021-27430: GE UR bootloader binary Version 7.00, 7.01 and 7.02 included unused hardcoded credentials

Wed, 17 Jun 2026 03:44:50 +0000

HIGH 8.4: GE UR bootloader binary Version 7.00, 7.01 and 7.02 included unused hardcoded credentials. Additionally, a user with physical access to the UR IED can interrupt the boot sequence by rebooting the UR.

CVE-2021-27428: GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration too

Wed, 17 Jun 2026 03:44:50 +0000

CRITICAL 9.8: GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration tool – Enervista UR Setup. This UR Setup tool validates the authenticity and integrity of firmware file before uploading the UR IED. An illegitimate user could upgrade firmware without appropri

CVE-2021-27426: GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling o

Wed, 17 Jun 2026 03:44:50 +0000

CRITICAL 9.8: GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the “Factory Mode,” which is used for servicing the IED by a “Factory” user.

CVE-2021-27424: GE UR firmware versions prior to version 8.1x shares MODBUS memory map as part of the communications guide

Wed, 17 Jun 2026 03:44:49 +0000

MEDIUM 5.3: GE UR firmware versions prior to version 8.1x shares MODBUS memory map as part of the communications guide. GE was made aware a “Last-key pressed” MODBUS register can be used to gain unauthorized information.

CVE-2021-27422: GE UR firmware versions prior to version 8.1x web server interface is supported on UR over HTTP protocol

Wed, 17 Jun 2026 03:44:49 +0000

HIGH 7.5: GE UR firmware versions prior to version 8.1x web server interface is supported on UR over HTTP protocol. It allows sensitive information exposure without authentication.

CVE-2021-27420: GE UR firmware versions prior to version 8.1x web server task does not properly handle receipt of unsupported

Wed, 17 Jun 2026 03:44:49 +0000

MEDIUM 5.3: GE UR firmware versions prior to version 8.1x web server task does not properly handle receipt of unsupported HTTP verbs, resulting in the web server becoming temporarily unresponsive after receiving a series of unsupported HTTP requests. When unresponsive, the web server is inaccessible. By itself,

CVE-2021-27418: GE UR firmware versions prior to version 8.1x supports web interface with read-only access

Wed, 17 Jun 2026 03:44:49 +0000

MEDIUM 5.3: GE UR firmware versions prior to version 8.1x supports web interface with read-only access. The device fails to properly validate user input, making it possible to perform cross-site scripting attacks, which may be used to send a malicious script. Also, UR Firmware web server does not perform HTML e

CVE-2020-25197: A code injection vulnerability exists in one of the webpages in GE Reason RT430, RT431 & RT434 GNSS clocks in

Wed, 17 Jun 2026 03:06:33 +0000

CRITICAL 9.8: A code injection vulnerability exists in one of the webpages in GE Reason RT430, RT431 & RT434 GNSS clocks in firmware versions prior to version 08A06 that could allow an authenticated remote attacker to execute arbitrary code on the system.

CVE-2020-25193: By having access to the hard-coded cryptographic key for GE Reason RT430, RT431 & RT434 GNSS clocks in firmwar

Wed, 17 Jun 2026 03:06:33 +0000

MEDIUM 5.3: By having access to the hard-coded cryptographic key for GE Reason RT430, RT431 & RT434 GNSS clocks in firmware versions prior to version 08A06, attackers would be able to intercept and decrypt encrypted traffic through an HTTPS connection.

CVE-2022-23921: Exploitation of this vulnerability may result in local privilege escalation and code execution

Wed, 17 Jun 2026 04:30:59 +0000

HIGH 7.5: Exploitation of this vulnerability may result in local privilege escalation and code execution. GE maintains exploitation of this vulnerability is only possible if the attacker has login access to a machine actively running CIMPLICITY, the CIMPLICITY server is not already running a project, and the

CVE-2022-21798: The affected product is vulnerable due to cleartext transmission of credentials seen in the CIMPLICITY network

Wed, 17 Jun 2026 04:27:00 +0000

HIGH 7.5: The affected product is vulnerable due to cleartext transmission of credentials seen in the CIMPLICITY network, which can be easily spoofed and used to log in to make operational changes to the system.

CVE-2021-31477: This vulnerability allows remote attackers to execute arbitrary code on affected installations of GE Reason RP

Wed, 17 Jun 2026 03:51:52 +0000

HIGH 7.3: This vulnerability allows remote attackers to execute arbitrary code on affected installations of GE Reason RPV311 14A03. Authentication is not required to exploit this vulnerability. The specific flaw exists within the firmware and filesystem of the device. The firmware and filesystem contain hard-

CVE-2021-27454: The software performs an operation at a privilege level higher than the minimum level required, which creates

Wed, 17 Jun 2026 03:44:53 +0000

HIGH 7.8: The software performs an operation at a privilege level higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses on the Reason DR60 (all firmware versions prior to 02A04.1).

CVE-2021-27452: The software contains a hard-coded password that could allow an attacker to take control of the merging unit u

Wed, 17 Jun 2026 03:44:53 +0000

HIGH 7.8: The software contains a hard-coded password that could allow an attacker to take control of the merging unit using these hard-coded credentials on the MU320E (all firmware versions prior to v04A00.1).

CVE-2021-27450: SSH server configuration file does not implement some best practices

Wed, 17 Jun 2026 03:44:53 +0000

HIGH 7.8: SSH server configuration file does not implement some best practices. This could lead to a weakening of the SSH protocol strength, which could lead to additional misconfiguration or be leveraged as part of a larger attack on the MU320E (all firmware versions prior to v04A00.1).