CVE-2023-4487

Description

References

• digitalsupport.ge.com/s/article/GE-Digital-CIMPLICITY-Privilege-Escalation-Vulnerability · Permissions Required
• cisa.gov/news-events/ics-advisories/icsa-23-243-02 · Third Party Advisory

Autres vulnérabilités de cimplicity

• CVE-2022-3092ÉLEVÉE 7.8GE CIMPICITY versions 2022 and prior is vulnerable to an out-of-bounds write, which could allow an attacker to execute arbitrary code.…
• CVE-2022-3084ÉLEVÉE 7.8GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiRootOptionT…
• CVE-2022-2952ÉLEVÉE 7.8GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiOptionCon…
• CVE-2022-2948ÉLEVÉE 7.8GE CIMPICITY versions 2022 and prior is vulnerable to a heap-based buffer overflow, which could allow an attacker to execute arbitrary cod…
• CVE-2022-2002ÉLEVÉE 7.8GE CIMPICITY versions 2022 and prior is vulnerable when data from faulting address controls code flow starting at gmmiObj!CGmmiOptionCon…