← CVE Intelligence

CVE-2022-2952

GE CIMPLICITY Access of Uninitialized Pointer PUBLISHED

Description (CNA)

GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, which could allow an attacker to execute arbitrary code.

Affected (CNA)

Vendor / productVersions
GE / CIMPLICITYaffected 0 through v2022

CWE

CWE-824

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.