Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2023-07-19	CVE-2023-3463	Out-of-bounds Write vulnerability in GE Cimplicity All versions of GE Digital CIMPLICITY that are not adhering to SDG guidance and accepting documents from untrusted sources are vulnerable to memory corruption issues due to insufficient input validation, including issues such as out-of-bounds reads and writes, use-after-free, stack-based buffer overflows, uninitialized pointers, and a heap-based buffer overflow. network low complexity ge CWE-787 critical	9.8
2022-02-25	CVE-2022-21798	Cleartext Transmission of Sensitive Information vulnerability in GE Cimplicity The affected product is vulnerable due to cleartext transmission of credentials seen in the CIMPLICITY network, which can be easily spoofed and used to log in to make operational changes to the system. network low complexity ge CWE-319 critical	9.8
2018-12-07	CVE-2018-15362	XXE vulnerability in GE Cimplicity 10.0/9.0R2/9.5 XXE in GE Proficy Cimplicity GDS versions 9.0 R2, 9.5, 10.0 network low complexity ge CWE-611 critical	9.1