CVE-2020-6992: Medium severity ge proficy cimplicity vulnerability
A local privilege escalation vulnerability has been identified in the GE Digital CIMPLICITY HMI/SCADA product v10.0 and prior. If exploited, this vulnerability could allow an adversary to modify the system, leading to the arbitrary execution of code. This vulnerability is only exploitable if an attacker has access to an authenticated session. GE Digital CIMPLICITY v11.0, released January 2020, contains mitigation for this local privilege escalation vulnerability. GE Digital recommends all users upgrade to GE CIMPLICITY v11.0 or newer.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for the local privilege escalation vulnerability in GE Digital CIMPLICITY HMI/SCADA product?
The vulnerability ID for the local privilege escalation vulnerability in GE Digital CIMPLICITY HMI/SCADA product is CVE-2020-6992.
What is the severity of CVE-2020-6992?
The severity of CVE-2020-6992 is medium.
What is the affected software for CVE-2020-6992?
The affected software for CVE-2020-6992 is GE Digital CIMPLICITY HMI/SCADA product version 10.0 and prior.
How can the local privilege escalation vulnerability in GE Digital CIMPLICITY HMI/SCADA product be exploited?
The local privilege escalation vulnerability in GE Digital CIMPLICITY HMI/SCADA product can be exploited by an adversary to modify the system, leading to the arbitrary execution of code.
Is there a fix available for CVE-2020-6992?
It is recommended to apply the latest security patches and updates provided by GE Digital to mitigate the CVE-2020-6992 vulnerability.