General Electric

Products

ProductCVEsExploitedLatest
Digital Industrial Gateway Server 2–Feb 23, 2023
Proficy CIMPLICITY2–Feb 25, 2022
Reason S20 Ethernet Switch2–Oct 20, 2020
MiCOM S1 Agile1–Nov 7, 2023

Exploited and recent CVEs

  • CVE-2023-0898 Medium 5.3 Uncontrolled Search Path Element in GE MiCOM S1 Agile 0.3%
  • CVE-2023-0754 Critical 9.8 The affected products are vulnerable to an integer overflow or wraparound, which could  allow an attacker to crash the server and remotely execute arbitrary code. 2.9%
  • CVE-2023-0755 Critical 9.8 The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code. 11.8%
  • CVE-2022-21798 High 7.5 ICSA-22-053-02 GE Proficy CIMPLICITY-Cleartext 0.6%
  • CVE-2022-23921 High 7.5 ICSA-22-053-01 GE Proficy CIMPLICITY-IPM 0.2%
  • CVE-2020-16246 Unrated GE Reason S20 Ethernet Switch 0.7%
  • CVE-2020-16242 Unrated GE Reason S20 Ethernet Switch 0.7%