GE
Vendor
GE
377
CVEs
0
On KEV
0
New 30D
Products
CI9.8
Cimplicity
GE
12 CVEs0 on KEV0 new
IP6.8
Intelligent Platforms Proficy Hmi/scada Cimplicity
GE
10 CVEs0 on KEV0 new
IG9.8
Industrial Gateway Server
GE
7 CVEs0 on KEV0 new
GC9.8
GE Communicator
GE
6 CVEs0 on KEV0 new
IP–
Intelligent Platforms Proficy Historian
GE
6 CVEs0 on KEV0 new
IP–
Intelligent Platforms Proficy Process Systems With Cimplicity
GE
6 CVEs0 on KEV0 new
IP–
Intelligent Platforms Proficy Real-time Information Portal
GE
6 CVEs0 on KEV0 new
MB9.8
Multilin B30 Firmware
GE
6 CVEs0 on KEV0 new
MB9.8
Multilin B90 Firmware
GE
6 CVEs0 on KEV0 new
MC9.8
Multilin C30 Firmware
GE
6 CVEs0 on KEV0 new
MC9.8
Multilin C60 Firmware
GE
6 CVEs0 on KEV0 new
MC9.8
Multilin C70 Firmware
GE
6 CVEs0 on KEV0 new
MC9.8
Multilin C95 Firmware
GE
6 CVEs0 on KEV0 new
MD9.8
Multilin D30 Firmware
GE
6 CVEs0 on KEV0 new
MD9.8
Multilin D60 Firmware
GE
6 CVEs0 on KEV0 new
MF9.8
Multilin F35 Firmware
GE
6 CVEs0 on KEV0 new
MF9.8
Multilin F60 Firmware
GE
6 CVEs0 on KEV0 new
MG9.8
Multilin G30 Firmware
GE
6 CVEs0 on KEV0 new
MG9.8
Multilin G60 Firmware
GE
6 CVEs0 on KEV0 new
ML9.8
Multilin L30 Firmware
GE
6 CVEs0 on KEV0 new
ML9.8
Multilin L60 Firmware
GE
6 CVEs0 on KEV0 new
ML9.8
Multilin L90 Firmware
GE
6 CVEs0 on KEV0 new
MM9.8
Multilin M60 Firmware
GE
6 CVEs0 on KEV0 new
MN9.8
Multilin N60 Firmware
GE
6 CVEs0 on KEV0 new
MT9.8
Multilin T35 Firmware
GE
6 CVEs0 on KEV0 new
MT9.8
Multilin T60 Firmware
GE
6 CVEs0 on KEV0 new
IF9.8
Ifix
GE
5 CVEs0 on KEV0 new
I99.8
Inet 900 Firmware
GE
5 CVEs0 on KEV0 new
II9.8
Inet II 900 Firmware
GE
5 CVEs0 on KEV0 new
MP9.8
Mds Pulsenet
GE
5 CVEs0 on KEV0 new
PH9.8
Proficy Historian
GE
5 CVEs0 on KEV0 new
SF9.8
Sd1 Firmware
GE
5 CVEs0 on KEV0 new
SF9.8
Sd2 Firmware
GE
5 CVEs0 on KEV0 new
SF9.8
Sd4 Firmware
GE
5 CVEs0 on KEV0 new
SF9.8
Sd9 Firmware
GE
5 CVEs0 on KEV0 new
TF9.8
Td220max Firmware
GE
5 CVEs0 on KEV0 new
TF9.8
Td220x Firmware
GE
5 CVEs0 on KEV0 new
IP–
Intelligent Platforms Proficy Hmi/scada Ifix
GE
4 CVEs0 on KEV0 new
IP–
Intelligent Platforms Proficy Process Systems
GE
3 CVEs0 on KEV0 new
M39.8
MS 3000 Firmware
GE
3 CVEs0 on KEV0 new
MF7.8
Mu320e Firmware
GE
3 CVEs0 on KEV0 new
MM5.4
Multilink Ml1200 Firmware
GE
3 CVEs0 on KEV0 new
MM5.4
Multilink Ml1600 Firmware
GE
3 CVEs0 on KEV0 new
MM5.4
Multilink Ml2400 Firmware
GE
3 CVEs0 on KEV0 new
MM5.4
Multilink Ml3000 Firmware
GE
3 CVEs0 on KEV0 new
MM5.4
Multilink Ml3100 Firmware
GE
3 CVEs0 on KEV0 new
MM5.4
Multilink Ml800 Firmware
GE
3 CVEs0 on KEV0 new
MM5.4
Multilink Ml810 Firmware
GE
3 CVEs0 on KEV0 new
RD9.8
Reason Dr60 Firmware
GE
3 CVEs0 on KEV0 new
RF9.8
Rt430 Firmware
GE
3 CVEs0 on KEV0 new
RF9.8
Rt431 Firmware
GE
3 CVEs0 on KEV0 new
RF9.8
Rt434 Firmware
GE
3 CVEs0 on KEV0 new
SF6.1
S2020 Firmware
GE
3 CVEs0 on KEV0 new
VS7.8
Voluson S8 Firmware
GE
3 CVEs0 on KEV0 new
AP7.2
Asset Performance Management Classic
GE
2 CVEs0 on KEV0 new
DL9.8
D60 Line Distance Relay Firmware
GE
2 CVEs0 on KEV0 new
DI9.8
Digital Industrial Gateway Server
GE
2 CVEs0 on KEV0 new
IP–
Intelligent Platforms Proficy Batch Execution
GE
2 CVEs0 on KEV0 new
IP–
Intelligent Platforms Proficy Dnp3 I/o Driver
GE
2 CVEs0 on KEV0 new
IP–
Intelligent Platforms Proficy Hmi%2fscada Cimplicity
GE
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-5909 | IG Industrial Gateway Server GE | 7.5 | Nov 30 | KEPServerEX does not properly validate certificates from clients which may allow unauthenticated users to connect |
| CVE-2023-5908 | IG Industrial Gateway Server GE | 9.1 | Nov 30 | KEPServerEX is vulnerable to a buffer overflow which may allow an attacker to crash the product being accessed or leak information |
| CVE-2023-0898 | MS Micom S1 Agile GE | 7.3 | Nov 7 | General Electric MiCOM S1 Agile is vulnerable to an attacker achieving code execution by placing malicious DLL files in the directory of the application |
| CVE-2023-4487 | CI Cimplicity GE | 7.8 | Sep 5 | GE CIMPLICITY 2023 is by a process control vulnerability, which could allow a local attacker to insert malicious configuration files in the expected web server execution path to… |
| CVE-2023-3463 | CI Cimplicity GE | 9.8 | Jul 19 | All versions of GE Digital CIMPLICITY that are not adhering to SDG guidance and accepting documents from untrusted sources are vulnerable to memory corruption issues due to… |
| CVE-2023-1552 | TO Toolboxst GE | 7.8 | Apr 11 | ToolboxST prior to version 7.10 is affected by a deserialization vulnerability |
| CVE-2022-2848 | IG Industrial Gateway Server GE | 9.1 | Mar 29 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0 |
| CVE-2022-2825 | IG Industrial Gateway Server GE | 9.8 | Mar 29 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0 |
| CVE-2023-0598 | IF Ifix GE | 9.8 | Mar 16 | GE Digital Proficy iFIX 2022, GE Digital Proficy iFIX v6.1, and GE Digital Proficy iFIX v6.5 are vulnerable to code injection, which may allow an attacker to insert malicious… |
| CVE-2023-0755 | DI Digital Industrial Gateway Server GE | 9.8 | Feb 23 | The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code |
| CVE-2023-0754 | DI Digital Industrial Gateway Server GE | 9.8 | Feb 23 | The affected products are vulnerable to an integer overflow or wraparound, which could allow an attacker to crash the server and remotely execute arbitrary code |
| CVE-2022-46732 | PH Proficy Historian GE | 9.8 | Jan 18 | Even if the authentication fails for local service authentication, the requested command could still execute regardless of authentication status |
| CVE-2022-46660 | PH Proficy Historian GE | 6.5 | Jan 18 | An unauthorized user could alter or write files with full control over the path and content of the file |
| CVE-2022-46331 | PH Proficy Historian GE | 8.1 | Jan 18 | An unauthorized user could possibly delete any file on the system |
| CVE-2022-43494 | PH Proficy Historian GE | 6.5 | Jan 18 | An unauthorized user could be able to read any file on the system, potentially exposing sensitive information |
| CVE-2022-38469 | PH Proficy Historian GE | 7.5 | Jan 18 | An unauthorized user with network access and the decryption key could decrypt sensitive data, such as usernames and passwords |
| CVE-2022-43977 | M3 MS 3000 Firmware GE | 9.8 | Jan 17 | An issue was discovered on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0 |
| CVE-2022-43976 | M3 MS 3000 Firmware GE | 9.8 | Jan 17 | An issue was discovered in FC46-WebBridge on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0 |
| CVE-2022-43975 | M3 MS 3000 Firmware GE | 7.5 | Jan 17 | An issue was discovered in FC46-WebBridge on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0 |
| CVE-2022-24120 | SF Sd4 Firmware GE | 4.6 | Dec 26 | Certain General Electric Renewable Energy products store cleartext credentials in flash memory |
| CVE-2022-24119 | TF Td220max Firmware GE | 9.8 | Dec 26 | Certain General Electric Renewable Energy products have a hidden feature for unauthenticated remote access to the device configuration shell |
| CVE-2022-24118 | TF Td220x Firmware GE | 9.1 | Dec 26 | Certain General Electric Renewable Energy products allow attackers to use a code to trigger a reboot into the factory default configuration |
| CVE-2022-24117 | SF Sd9 Firmware GE | 9.8 | Dec 26 | Certain General Electric Renewable Energy products download firmware without an integrity check |
| CVE-2022-24116 | TF Td220max Firmware GE | 9.8 | Dec 26 | Certain General Electric Renewable Energy products have inadequate encryption strength |
| CVE-2022-3092 | CI Cimplicity GE | 7.8 | Dec 8 | GE CIMPICITY versions 2022 and prior is vulnerable to an out-of-bounds write, which could allow an attacker to execute arbitrary code |
| CVE-2022-3084 | CI Cimplicity GE | 7.8 | Dec 8 | GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiRootOptionTable, which could allow an attacker to… |
| CVE-2022-2952 | CI Cimplicity GE | 7.8 | Dec 7 | GE CIMPICITY versions 2022 and prior is vulnerable when data from a faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, which could allow an attacker… |
| CVE-2022-2948 | CI Cimplicity GE | 7.8 | Dec 7 | GE CIMPICITY versions 2022 and prior is vulnerable to a heap-based buffer overflow, which could allow an attacker to execute arbitrary code |
| CVE-2022-2002 | CI Cimplicity GE | 7.8 | Dec 7 | GE CIMPICITY versions 2022 and prior is vulnerable when data from faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, which could allow an attacker… |
| CVE-2022-37953 | WO Workstationst GE | 6.1 | Aug 25 | An HTTP response splitting vulnerability exists in the AM Gateway Challenge-Response dialog of WorkstationST (<v07.09.15) and could allow an attacker to compromise a victim's… |
| CVE-2022-37952 | WO Workstationst GE | 6.1 | Aug 25 | A reflected cross-site scripting (XSS) vulnerability exists in the iHistorian Data Display of WorkstationST (<v07.09.15) could allow an attacker to compromise a victim's browser |
| CVE-2020-36549 | VS Voluson S8 Firmware GE | 7.8 | Jun 17 | A vulnerability classified as critical was found in GE Voluson S8 |
| CVE-2020-36548 | VS Voluson S8 Firmware GE | 7.8 | Jun 17 | A vulnerability classified as problematic has been found in GE Voluson S8 |
| CVE-2020-36547 | VS Voluson S8 Firmware GE | 7.8 | Jun 17 | A vulnerability was found in GE Voluson S8 |
| CVE-2021-44477 | TO Toolboxst GE | 7.5 | Mar 25 | GE Gas Power ToolBoxST Version v04.07.05C suffers from an XML external entity (XXE) vulnerability using the DTD parameter entities technique that could result in disclosure and… |
| CVE-2021-27430 | UB UR Bootloader Binary GE | 6.8 | Mar 23 | GE UR bootloader binary Version 7.00, 7.01 and 7.02 included unused hardcoded credentials |
| CVE-2021-27428 | MB Multilin B30 Firmware GE | 9.8 | Mar 23 | GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration tool – Enervista UR Setup |
| CVE-2021-27426 | MN Multilin N60 Firmware GE | 9.8 | Mar 23 | GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the “Factory Mode,” which is used for servicing the IED by a… |
| CVE-2021-27424 | MB Multilin B30 Firmware GE | 5.3 | Mar 23 | GE UR firmware versions prior to version 8.1x shares MODBUS memory map as part of the communications guide |
| CVE-2021-27422 | MB Multilin B30 Firmware GE | 7.5 | Mar 23 | GE UR firmware versions prior to version 8.1x web server interface is supported on UR over HTTP protocol |
| CVE-2021-27420 | MF Multilin F60 Firmware GE | 5.3 | Mar 23 | GE UR firmware versions prior to version 8.1x web server task does not properly handle receipt of unsupported HTTP verbs, resulting in the web server becoming temporarily… |
| CVE-2021-27418 | MC Multilin C60 Firmware GE | 6.1 | Mar 23 | GE UR firmware versions prior to version 8.1x supports web interface with read-only access |
| CVE-2020-25197 | RF Rt430 Firmware GE | 8.8 | Mar 18 | A code injection vulnerability exists in one of the webpages in GE Reason RT430, RT431 & RT434 GNSS clocks in firmware versions prior to version 08A06 that could allow an… |
| CVE-2020-25193 | RF Rt434 Firmware GE | 5.3 | Mar 18 | By having access to the hard-coded cryptographic key for GE Reason RT430, RT431 & RT434 GNSS clocks in firmware versions prior to version 08A06, attackers would be able to… |
| CVE-2022-23921 | PC Proficy Cimplicitiy GE | 7.8 | Feb 25 | Exploitation of this vulnerability may result in local privilege escalation and code execution |
| CVE-2022-21798 | CI Cimplicity GE | 9.8 | Feb 25 | The affected product is vulnerable due to cleartext transmission of credentials seen in the CIMPLICITY network, which can be easily spoofed and used to log in to make operational… |
| CVE-2021-31477 | RR Reason Rpv311 Firmware GE | 7.3 | Jun 16 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of GE Reason RPV311 14A03 |
| CVE-2021-27454 | RD Reason Dr60 Firmware GE | 7.8 | Mar 25 | The software performs an operation at a privilege level higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses on… |
| CVE-2021-27452 | MF Mu320e Firmware GE | 7.8 | Mar 25 | The software contains a hard-coded password that could allow an attacker to take control of the merging unit using these hard-coded credentials on the MU320E (all firmware… |
| CVE-2021-27450 | MF Mu320e Firmware GE | 7.8 | Mar 25 | SSH server configuration file does not implement some best practices |
| CVE-2021-27448 | MF Mu320e Firmware GE | 7.8 | Mar 25 | A miscommunication in the file system allows adversaries with access to the MU320E to escalate privileges on the MU320E (all firmware versions prior to v04A00.1) |
| CVE-2021-27440 | RD Reason Dr60 Firmware GE | 9.8 | Mar 25 | The software contains a hard-coded password it uses for its own inbound authentication or for outbound communication to external components on the Reason DR60 (all firmware… |
| CVE-2021-27438 | RD Reason Dr60 Firmware GE | 8.8 | Mar 25 | The software contains a hard-coded password it uses for its own inbound authentication or for outbound communication to external components on the Reason DR60 (all firmware… |
| CVE-2019-18243 | IF Ifix GE | 5.5 | Feb 18 | HMI/SCADA iFIX (Versions 6.1 and prior) allows a local authenticated user to modify system-wide iFIX configurations through the registry |
| CVE-2019-18255 | IF Ifix GE | 5.5 | Feb 18 | HMI/SCADA iFIX (Versions 6.1 and prior) allows a local authenticated user to modify system-wide iFIX configurations through section objects |
| CVE-2020-27267 | IG Industrial Gateway Server GE | 9.1 | Jan 14 | KEPServerEX v6.0 to v6.9, ThingWorx Kepware Server v6.8 and v6.9, ThingWorx Industrial Connectivity (all versions), OPC-Aggregator (all versions), Rockwell Automation KEPServer… |
| CVE-2020-27265 | IG Industrial Gateway Server GE | 9.8 | Jan 14 | KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All versions, Rockwell Automation KEPServer… |
| CVE-2020-27263 | IG Industrial Gateway Server GE | 9.1 | Jan 14 | KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All versions, Rockwell Automation KEPServer… |
| CVE-2020-16246 | SF S2020 Firmware GE | 6.1 | Oct 20 | The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting (XSS), which may allow attackers to trick users into following a link or navigating to a page that… |
| CVE-2020-16242 | SF S2020 Firmware GE | 6.1 | Sep 25 | The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting (XSS), which may allow an attacker to trick application users into performing critical application… |