Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2022-2002

GE CIMPLICITY Untrusted Pointer Dereference

Description

GE CIMPICITY versions 2022 and prior is vulnerable when data from faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, which could allow an attacker to execute arbitrary code.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GE CIMPLICITY

Default version status: unaffected

  • 0 to ≤ v2022affected

References