Cimplicity
Approved changes feed: RSS · Atom
cpe:2.3:a:ge_digital:cimplicity:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ge Digital (d8c8a9c5-4e13-5551-a864-f0df5fafa876) |
|---|---|
| Product | Cimplicity (a9a8b5ce-b816-574b-b3c6-ceef501df0c9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-4487 |
vulnerable | 2026-06-08 06:16:12.736919 |
GE Digital CIMPLICITY Process Control
HIGH (7.8)
GE CIMPLICITY 2023 is by a process control vulnerability, which could allow a local attacker to insert malicious configuration files in the expected web server execution path to escalate privileges and gain full control of the HMI software.
Published: 2023-09-05T22:55:45.047Z
Updated: 2025-01-16T21:30:31.371Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3463 |
vulnerable | 2026-06-08 06:09:39.633130 |
GE Digital CIMPLICITY Heap-based Buffer Overflow
MEDIUM (6.6)
All versions of GE Digital CIMPLICITY that are not adhering to SDG guidance and accepting documents from untrusted sources are vulnerable to memory corruption issues due to insufficient input validation, including issues such as out-of-bounds reads and writes, use-after-free, stack-based buffer overflows, uninitialized pointers, and a heap-based buffer overflow. Successful exploitation could allow an attacker to execute arbitrary code.
Published: 2023-07-19T13:40:22.326Z
Updated: 2024-10-21T18:16:08.986Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.