General Electric
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Digital Industrial Gateway Server | 2 | – | Feb 23, 2023 |
| Proficy CIMPLICITY | 2 | – | Feb 25, 2022 |
| Reason S20 Ethernet Switch | 2 | – | Oct 20, 2020 |
| MiCOM S1 Agile | 1 | – | Nov 7, 2023 |
Exploited and recent CVEs
- CVE-2023-0898 Uncontrolled Search Path Element in GE MiCOM S1 Agile 0.3%
- CVE-2023-0754 The affected products are vulnerable to an integer overflow or wraparound, which could allow an attacker to crash the server and remotely execute arbitrary code. 2.9%
- CVE-2023-0755 The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code. 11.8%
- CVE-2022-21798 ICSA-22-053-02 GE Proficy CIMPLICITY-Cleartext 0.6%
- CVE-2022-23921 ICSA-22-053-01 GE Proficy CIMPLICITY-IPM 0.2%
- CVE-2020-16246 GE Reason S20 Ethernet Switch 0.7%
- CVE-2020-16242 GE Reason S20 Ethernet Switch 0.7%