CVE-2023-4487 (published 2023-09-05T22:55:45.047Z)

GE CIMPLICITY 2023 is by a process control vulnerability, which could allow a local attacker to insert malicious configuration files in the expected web server execution path to escalate privileges and gain full control of the HMI software.


Affected products: Vendor: GE Digital
Product: CIMPLICITY
Versions: 2023