Vulnerability CVE-2022-3084


Published: 2022-12-08

Description:
GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiRootOptionTable, which could allow an attacker to execute arbitrary code.

Type:

CWE-824

(Access of Uninitialized Pointer)

 References:
https://www.cisa.gov/uscert/ics/advisories/icsa-22-326-04

Copyright 2024, cxsecurity.com

 

Back to Top