Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2022-3084

GE CIMPLICITY Access of Uninitialized Pointer

Description

GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiRootOptionTable, which could allow an attacker to execute arbitrary code.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GE CIMPLICITY

Default version status: unaffected

  • 0 to ≤ v2022affected

References