CVE-2022-2002

—

CVSS 3.1

7.8 high

EPSS

<1%p22

Published

Dec 7, 2022 (Dec 7, 2022)

Modified

Jun 17, 2026

Description

GE CIMPICITY versions 2022 and prior is vulnerable when data from faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, which could allow an attacker to execute arbitrary code.

Vendors: ge
Products: cimplicity
Weakness: CWE-822
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.