CVE-2022-2952
GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, which could allow an attacker to execute arbitrary code.
- Score
- CVSS 3.1 7.8 High
- Status
- Modified - ics-cert@hq.dhs.gov
- Published
- 2022-12-07
- Last modified
- 2025-04-16
- Weaknesses
- CWE-824
Affected products
- Cimplicity (Ge)
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-326-04
