CVE-2022-21798 — ICSA-22-053-02 GE Proficy CIMPLICITY-Cleartext

CVE-2022-21798

ICSA-22-053-02 GE Proficy CIMPLICITY-Cleartext PUBLISHED

Description (CNA)

The affected product is vulnerable due to cleartext transmission of credentials seen in the CIMPLICITY network, which can be easily spoofed and used to log in to make operational changes to the system.

Affected (CNA)

Vendor / product	Versions
General Electric / Proficy CIMPLICITY	affected all

CWE

CWE-319

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-053-02

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-22-053-02

CISA-ADP

No English description supplied.

No references supplied.