CVE-2023-4487

概要

参考情報

• digitalsupport.ge.com/s/article/GE-Digital-CIMPLICITY-Privilege-Escalation-Vulnerability · Permissions Required
• cisa.gov/news-events/ics-advisories/icsa-23-243-02 · Third Party Advisory

cimplicity のその他の脆弱性

• CVE-2022-3092高 7.8GE CIMPICITY versions 2022 and prior is vulnerable to an out-of-bounds write, which could allow an attacker to execute arbitrary code.…
• CVE-2022-3084高 7.8GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiRootOptionT…
• CVE-2022-2952高 7.8GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiOptionCon…
• CVE-2022-2948高 7.8GE CIMPICITY versions 2022 and prior is vulnerable to a heap-based buffer overflow, which could allow an attacker to execute arbitrary cod…
• CVE-2022-2002高 7.8GE CIMPICITY versions 2022 and prior is vulnerable when data from faulting address controls code flow starting at gmmiObj!CGmmiOptionCon…