Back to Database
Status published
High
CVE-2022-3092
GE CIMPLICITY Out-of-bounds Write
Vulnerability Description
GE CIMPICITY versions 2022 and prior is vulnerable to an out-of-bounds write, which could allow an attacker to execute arbitrary code.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-3092
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Kimiya working with Trend micro Zero Day Initiative reported these vulnerabilities to CISA.
More from GE
View All →CVE-2022-3084
GE CIMPLICITY Access of Uninitialized Pointer
High
7.8
CVE-2022-2952
GE CIMPLICITY Access of Uninitialized Pointer
High
7.8
CVE-2022-2948
GE CIMPLICITY Heap-based Buffer Overflow
High
7.8
CVE-2022-2002
GE CIMPLICITY Untrusted Pointer Dereference
High
7.8
CVE-2021-31477
This vulnerability allows remote attackers to execute arbitrary code on...
Medium
6.3
Affected Vendor
Affected Software
CIMPLICITY
Vulnerable Versions:
0
Timeline
Official Publish:
December 7th, 2022
Last Modified:
April 16th, 2025
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H