CVE-2023-4487

Mô tả

Tham khảo

• digitalsupport.ge.com/s/article/GE-Digital-CIMPLICITY-Privilege-Escalation-Vulnerability · Permissions Required
• cisa.gov/news-events/ics-advisories/icsa-23-243-02 · Third Party Advisory

Lỗ hổng khác của cimplicity

• CVE-2022-3092CAO 7.8GE CIMPICITY versions 2022 and prior is vulnerable to an out-of-bounds write, which could allow an attacker to execute arbitrary code.…
• CVE-2022-3084CAO 7.8GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiRootOptionT…
• CVE-2022-2952CAO 7.8GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiOptionCon…
• CVE-2022-2948CAO 7.8GE CIMPICITY versions 2022 and prior is vulnerable to a heap-based buffer overflow, which could allow an attacker to execute arbitrary cod…
• CVE-2022-2002CAO 7.8GE CIMPICITY versions 2022 and prior is vulnerable when data from faulting address controls code flow starting at gmmiObj!CGmmiOptionCon…