1. Home
  2. CVE Database
  3. CVE-2023-3463
MEDIUM · 6.6

CVE-2023-3463

All versions of GE Digital CIMPLICITY that are not adhering to SDG guidance and accepting documents from untrusted sources are vulnerable to memory corruption issues due to insufficient input validat...

Vulnerability Description

All versions of GE Digital CIMPLICITY that are not adhering to SDG guidance and accepting documents from untrusted sources are vulnerable to memory corruption issues due to insufficient input validation, including issues such as out-of-bounds reads and writes, use-after-free, stack-based buffer overflows, uninitialized pointers, and a heap-based buffer overflow. Successful exploitation could allow an attacker to execute arbitrary code.

CVSS Score

6.6

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
HIGH

Affected Products

VendorProductVersions
GeCimplicityAll versions

Related Weaknesses (CWE)

CWE-122CWE-787

References

FAQ

What is CVE-2023-3463?

CVE-2023-3463 is a vulnerability with a CVSS score of 6.6 (MEDIUM). All versions of GE Digital CIMPLICITY that are not adhering to SDG guidance and accepting documents from untrusted sources are vulnerable to memory corruption issues due to insufficient input validat...

How severe is CVE-2023-3463?

CVE-2023-3463 has been rated MEDIUM with a CVSS base score of 6.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-3463?

Check the references section above for vendor advisories and patch information. Affected products include: Ge Cimplicity.