CVE-2022-2948 HIGH

CVE-2022-2948: GE CIMPLICITY Heap-based Buffer Overflow

Vendor Ge

Product CIMPLICITY

Weakness CWE-122

Published December 7, 2022

Last update April 16, 2025

CVSS base score

7.8/10

Attack vector Local

Attack complexity Low

Privileges required None

User interaction Required

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

GE CIMPICITY versions 2022 and prior is vulnerable to a heap-based buffer overflow, which could allow an attacker to execute arbitrary code.

Key dates

December 7, 2022 CVE published

April 16, 2025 Record updated

External resources

Related vulnerabilities