Ge 脆弱性

タイムライン

タイプ

製品

GE Digital Proficy Historian7
GE UR IED7
GE CIMPLICITY6
GE Communicator6
GE Intelligent Platforms Proficy Hmi6

修復

Official Fix54
Temporary Fix0
Workaround4
Unavailable3
Not Defined81

悪用可能性

High5
Functional1
Proof-of-Concept8
Unproven1
Not Defined127

アクセスベクター

Not Defined0
Physical1
Local17
Adjacent13
Network111

認証

Not Defined0
High0
Low27
None115

ユーザー操作

Not Defined0
Required17
None125

C3BM Index

CVSSv3 Base

≤10
≤20
≤31
≤42
≤57
≤625
≤716
≤850
≤921
≤1020

CVSSv3 Temp

≤10
≤20
≤31
≤42
≤59
≤625
≤721
≤843
≤923
≤1018

VulDB

≤10
≤20
≤31
≤48
≤511
≤626
≤711
≤855
≤911
≤1019

NVD

≤10
≤20
≤30
≤40
≤50
≤66
≤710
≤814
≤96
≤1019

CNA

≤10
≤20
≤30
≤40
≤52
≤64
≤71
≤814
≤92
≤104

ベンダー

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

0dayエクスプロイト

<1k15
<2k52
<5k74
<10k0
<25k1
<50k0
<100k0
≥100k0

本日のエクスプロイト

<1k133
<2k7
<5k1
<10k1
<25k0
<50k0
<100k0
≥100k0

闇ツールの市場規模

🔴 CTI アクティビティ

Affected Products (104): AW (2), Aespire 7100 (1), Aespire 7900 (1), Aestiva 7100 (1), Aestiva 7900 (1), Bently Nevada 3500-22 (1), BrightSpeed (2), Brivo (2), CIMPLICITY (9), Centricity PACS RA1000 (1), Communicator (6), D60 Line Distance Relay (2), Digital APM Classic (2), Digital CIMPLICITY HMI-SCADA (1), Digital Energy MDS PulseNET (2), DiscoveryRevolution EVO (2), EX2100e (1), EX2100e_Reg (2), EchoPAC (2), File Explorer (1), GEMNet License Server (1), Grid Solutions Reason RT Clock RT430 (1), Grid Solutions Reason RT Clock RT431 (1), Grid Solutions Reason RT Clock RT434 (1), HMI-SCADA iFIX (2), Healthcare CADStream Server (1), Healthcare Centricity Analytics Server (1), Healthcare Centricity Clinical Archive Audit Trail Repository (1), Healthcare Centricity DMS (2), Healthcare Centricity Image Vault (1), Healthcare Centricity PACS (2), Healthcare Centricity PACS-IW (2), Healthcare Centricity PACS Workstation (2), Healthcare Discovery 530C (1), Healthcare Discovery NM 750b (1), Healthcare Discovery VH (1), Healthcare Discovery XR656 (1), Healthcare Discovery XR656 G2 (1), Healthcare Infinia II (1), Healthcare Millennium (2), Healthcare Optima (1), Healthcare Optima MR360 (2), Healthcare Precision MPi (1), Healthcare Precision THUNIS-800+ (1), Healthcare Revolution XQi (1), Healthcare eNTEGRA P (1), Hydran M2 (1), Image Vault (2), Industrial Solutions UPS SNMP-Web Adapter (2), Infina (2), Infinia Hawkeye (1), Innova (2), Intelligent Platforms Proficy Historian (6), Intelligent Platforms Proficy Hmi (6), Intelligent Platforms Proficy Plant Applications (2), Intelligent Platforms Proficy Process Systems (2), Intelligent Platforms Proficy Real-Time Information Portal (6), LOGIQ (2), LS2100e (2), MDS PulseNET (3), MDS PulseNET Enterprise (5), MS3000 (3), MU320E (3), Mark VIe (1), Mark VIe Controller (2), Multilink ML (3), Multilink ML800 (1), Multilink ML810 (1), Multilink ML1200 (1), Multilink ML1600 (1), Multilink ML3000 (1), Multilink ML3100 (1), Optima (2), PACSystems (1), PACSystems RX3i (1), PET Discovery IQ (2), PETrace (2), Proficy CIMPLICITY (2), Proficy Cimplicity GDS (1), Proficy HMI (1), Proficy Historian (7), Proficy Real-Time Information Portal (2), R (1), Reason DR60 (3), Reason RPV311 (1), Reason RT430 (2), Reason RT431 (2), Reason RT434 (2), Reason S20 Ethernet Switch (2), S2020 Fast Switch 61850 (1), SCADA-CIMPLICITY (1), Signa (2), ToolBoxST (1), UR IED (7), Ventri (2), Vivid (2), Voluson (2), Voluson S8 (4), WorkstationST (2), Xeleris (3), iFIX (2), scada Cimplicity (4), scada Ifix (2), unzip (1)

公開済みBaseTemp脆弱性Prod修復EPSSCTICVE
2023年08月31日7.87.6GE Digital CIMPLICITY Configuration File Local Privilege Escalation未知Not DefinedOfficial Fix0.000420.02CVE-2023-4487
2023年07月18日7.27.2GE Digital CIMPLICITY メモリ破損未知Not DefinedOfficial Fix0.001280.02CVE-2023-3463
2023年03月17日8.58.4GE Digital iFIX Configuration File 特権昇格未知Not DefinedOfficial Fix0.001580.00CVE-2023-0598
2023年01月18日9.89.7GE Digital Proficy Historian 弱い認証未知Not DefinedNot Defined0.001870.02CVE-2022-46732
2023年01月18日7.17.0GE Digital Proficy Historian 特権昇格未知Not DefinedNot Defined0.000530.00CVE-2022-46660
2023年01月18日7.67.5GE Grid Solutions MS3000 qconn Service 特権昇格未知Not DefinedOfficial Fix0.002010.02CVE-2022-43977
2023年01月18日5.95.8GE Grid Solutions MS3000 FC46-WebBridge ディレクトリトラバーサル未知Not DefinedOfficial Fix0.001440.00CVE-2022-43975
2023年01月18日8.58.4GE Grid Solutions MS3000 FC46-WebBridge 弱い認証未知Not DefinedOfficial Fix0.001700.00CVE-2022-43976
2023年01月17日5.65.5GE Digital Proficy Historian 情報の漏洩未知Not DefinedOfficial Fix0.001430.05CVE-2022-38469
2023年01月17日7.06.9GE Digital Proficy Historian 特権昇格未知Not DefinedOfficial Fix0.000730.05CVE-2022-46331
2023年01月17日6.46.4GE Digital Proficy Historian 特権昇格未知Not DefinedOfficial Fix0.000640.00CVE-2022-43494
2023年01月17日7.17.0GE Digital Proficy Historian 特権昇格未知Not DefinedOfficial Fix0.000530.00CVE-2022-46660
2023年01月17日8.58.4GE Digital Proficy Historian 弱い認証未知Not DefinedOfficial Fix0.001870.03CVE-2022-46732
2022年12月28日4.64.4yi-ge unzip ディレクトリトラバーサル未知Not DefinedOfficial Fix0.001400.00CVE-2020-36561
2022年11月24日8.38.3GE CIMPLICITY メモリ破損未知Not DefinedNot Defined0.000520.05CVE-2022-3092
2022年11月24日8.88.8GE CIMPLICITY CGmmiOptionContainer メモリ破損未知Not DefinedNot Defined0.000520.02CVE-2022-2002
2022年11月24日8.38.3GE CIMPLICITY メモリ破損未知Not DefinedNot Defined0.000840.04CVE-2022-2948
2022年11月24日8.38.3GE CIMPLICITY CGmmiOptionContainer Remote Code Execution未知Not DefinedNot Defined0.000520.00CVE-2022-2952
2022年11月24日8.38.3GE CIMPLICITY CGmmiRootOptionTable Remote Code Execution未知Not DefinedNot Defined0.000520.04CVE-2022-3084
2022年08月26日5.05.0GE WorkstationST iHistorian Data Display クロスサイトスクリプティング未知Not DefinedOfficial Fix0.000720.00CVE-2022-37952
2022年08月26日5.25.1GE WorkstationST Challenge-Response 特権昇格未知Not DefinedOfficial Fix0.000720.00CVE-2022-37953
2022年03月24日7.67.5GE UR IED Boot Sequence 弱い認証未知Not DefinedNot Defined0.000650.00CVE-2021-27430
2022年03月24日4.84.7GE UR IED Web Interface クロスサイトスクリプティング未知Not DefinedOfficial Fix0.001000.00CVE-2021-27418
2022年03月24日9.89.6GE UR IED Factory Mode Remote Code Execution未知Not DefinedOfficial Fix0.002130.02CVE-2021-27426
2022年03月24日5.35.2GE UR IED Modbus 情報の漏洩未知Not DefinedOfficial Fix0.000750.07CVE-2021-27424

117 非表示のエントリあり

Want to stay up to date on a daily basis?

Enable the mail alert feature now!