9.8
CVSSv3

CVE-2023-0598

Published: 16/03/2023 Updated: 07/11/2023
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 0

Vulnerability Summary

GE Digital Proficy iFIX 2022, GE Digital Proficy iFIX v6.1, and GE Digital Proficy iFIX v6.5 are vulnerable to code injection, which may allow an malicious user to insert malicious configuration files in the expected web server execution path and gain full control of the HMI software.

Vulnerable Product Search on Vulmon Subscribe to Product

ge ifix 6.5

ge ifix 2022

ge ifix 6.1