GE Proficy CIMPLICITY-IPM

Risk Summary

Successful exploitation of this vulnerability could allow an attacker to achieve both code execution and local privilege escalation.

CVEs (1)

Remediations

• GE Digital recommends users upgrade all instances of the affected software to GE Digital's Proficy CIMPLICITY, released January 2022 (Upgrade) and follow the instructions in the Secure Deployment Guide to restrict which CIMPLICITY projects are allowed to run.
• The upgrade contains what GE believes are mitigation measures to help ensure the vulnerability cannot be exploited.
• Users are encouraged to contact a GE Digital representative for the latest versions of the update.
• For users who choose to not implement the upgrade, GE Digital recommends applying the instructions in CIMPLICITY's Secure Deployment Guide to ensure access to the CIMPLICITY machines and directories are properly controlled via access control limits.

Affected Vendors

Affected Products (1)

Affected Sectors

Multiple Sectors