CVE-2022-21798
ICSA-22-053-02 GE Proficy CIMPLICITY-Cleartext
- State
- Published
- Severity
- 7.5 High
- Published
- Feb 25, 2022
- Updated
- Apr 16, 2025
- Reserved
- Jan 27, 2022
Description
The affected product is vulnerable due to cleartext transmission of credentials seen in the CIMPLICITY network, which can be easily spoofed and used to log in to make operational changes to the system.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.5 High | CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H | icscert |
Weaknesses
- CWE-319 Cleartext Transmission of Sensitive Information
Affected Products
| Product | Versions |
|---|---|
Proficy CIMPLICITYGeneral Electric |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.