7.8
High
CVE-2022-2002 GE CIMPICITY versions 2022 and prior is vulnerable when data from faulting address controls code flow starting at…
Description
GE CIMPICITY versions 2022 and prior is vulnerable when data from faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, which could allow an attacker to execute arbitrary code.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CIMPLICITY 2022 | earliest → 2022 | No fix stated |
Other CVEs of CIMPLICITY
The 5 CVEs of CIMPLICITY →
CVE-2022-3092
GE CIMPICITY versions 2022 and prior is vulnerable to an out-of-bounds write, which could allow an attacker to…
7.8
High
CVE-2022-3084
GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at…
7.8
High
CVE-2022-2952
GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at…
7.8
High
CVE-2022-2948
GE CIMPICITY versions 2022 and prior is vulnerable to a heap-based buffer overflow, which could allow an attacker to…
7.8
High