PT-2023-5230 · Ge · Ge Cimpicity

Michael Heinzl · Published 2023-09-05 · Updated 2024-01-01 · CVE-2023-4487

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GE CIMPLICITY version 2023

Description The issue is related to a process control vulnerability in GE CIMPLICITY 2023, which could allow a local attacker to insert malicious configuration files in the expected web server execution path to escalate privileges and gain full control of the HMI software. This vulnerability exists due to a problem with process management.

Recommendations For GE CIMPLICITY version 2023, as a temporary workaround, consider restricting access to the web server execution path to minimize the risk of exploitation. Additionally, monitor the system for any suspicious activity and apply patches as soon as they become available from the vendor. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-114

Related Identifiers

BDU:2023-05842

CVE-2023-4487

Affected Products

Ge Cimpicity

References · 14

• https://bdu.fstec.ru/vul/2023-05842 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-4487 · Security Note
• https://osv.dev/vulnerability/CVE-2023-4487 · Vendor Advisory
• https://vuldb.com/?id.238496 · Note
• https://digitalsupport.ge.com/s/article/GE-Digital-CIMPLICITY-Privilege-Escalation-Vulnerability · Note
• https://t.me/cvenotify/57870 · Telegram Post
• https://t.me/cibsecurity/69925 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-23-243-02 · Note
• https://twitter.com/nikolozsec/status/1713637097423491353 · Twitter Post
• https://twitter.com/CVEnew/status/1699199355708706927 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1699220417804697934 · Twitter Post
• https://twitter.com/cracbot/status/1699301522369323253 · Twitter Post
• https://twitter.com/TalosSecurity/status/1741821578583703876 · Twitter Post
• https://cybersecurity-help.cz/vdb/SB2023090410 · Note