CVE-2022-21798: high-severity vulnerability in General Electric Proficy CIMPLICITY
ICSA-22-053-02 GE Proficy CIMPLICITY-Cleartext
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.5epss 0.6%
The affected product is vulnerable due to cleartext transmission of credentials seen in the CIMPLICITY network, which can be easily spoofed and used to log in to make operational changes to the system.
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
General Electric · Proficy CIMPLICITYRelated CVEs — General Electric Proficy CIMPLICITY
In the same product, most dangerous first.