---
title: "GE vulnerabilities: CVEs, CISA KEV and security advisories"
url: https://radicalnotion.ai/vendor/ge
type: vendor
description: "GE has 129 published CVEs, 0 in CISA KEV and 7 with public exploits."
updated: 2024-08-16
source: RadicalNotion.AI
license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/)
---

# GE vulnerabilities

- **Published CVEs:** 129
- **In CISA KEV:** 0
- **With a public exploit:** 7
- **With a patch:** 66
- **Average CVSS:** 8.0
- **CVEs in the last two years:** 0
- **First CVE:** 2008-01-29
- **Latest CVE:** 2024-08-16

## Severity breakdown

| Severity | CVEs |
| --- | --- |
| Critical | 51 |
| High | 44 |
| Medium | 34 |
| Low | 0 |
| Unscored | 0 |

## Most affected products

| Product | CVEs |
| --- | --- |
| [CIMPLICITY](https://radicalnotion.ai/vendor/ge/cimplicity) | 12 |
| [intelligent platforms proficy hmi/scada cimplicity](https://radicalnotion.ai/vendor/ge/intelligent-platforms-proficy-hmi-scada-cimplicity) | 10 |
| [industrial gateway server](https://radicalnotion.ai/vendor/ge/industrial-gateway-server) | 7 |
| [intelligent platforms proficy real-time information portal](https://radicalnotion.ai/vendor/ge/intelligent-platforms-proficy-real-time-information-portal) | 6 |
| [intelligent platforms proficy process systems with cimplicity](https://radicalnotion.ai/vendor/ge/intelligent-platforms-proficy-process-systems-with-cimplicity) | 6 |
| [GE Communicator](https://radicalnotion.ai/vendor/ge/ge-communicator) | 6 |
| [intelligent platforms proficy historian](https://radicalnotion.ai/vendor/ge/intelligent-platforms-proficy-historian) | 6 |
| [multilin b30](https://radicalnotion.ai/vendor/ge/multilin-b30) | 6 |

## Most common weakness types

| CWE | Name | CVEs |
| --- | --- | --- |
| [CWE-119](https://radicalnotion.ai/cwe/cwe-119) | Improper Restriction of Operations within the Bounds of a Memory Buffer | 10 |
| [CWE-20](https://radicalnotion.ai/cwe/cwe-20) | Improper Input Validation | 9 |
| [CWE-22](https://radicalnotion.ai/cwe/cwe-22) | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 7 |
| [CWE-287](https://radicalnotion.ai/cwe/cwe-287) | Improper Authentication | 7 |
| [CWE-79](https://radicalnotion.ai/cwe/cwe-79) | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 6 |
| [CWE-798](https://radicalnotion.ai/cwe/cwe-798) | Use of Hard-coded Credentials | 6 |
| [CWE-122](https://radicalnotion.ai/cwe/cwe-122) | Heap-based Buffer Overflow | 6 |
| [CWE-284](https://radicalnotion.ai/cwe/cwe-284) | Improper Access Control | 5 |

## Assigning CNAs

| CNA | CVEs |
| --- | --- |
| [icscert](https://radicalnotion.ai/cna/icscert) | 105 |
| [mitre](https://radicalnotion.ai/cna/mitre) | 9 |
| [certcc](https://radicalnotion.ai/cna/certcc) | 8 |
| [GE GP](https://radicalnotion.ai/cna/ge-gp) | 3 |
| [zdi](https://radicalnotion.ai/cna/zdi) | 3 |
| [Kaspersky](https://radicalnotion.ai/cna/kaspersky) | 1 |

## CVEs by year

| Year | CVEs published |
| --- | --- |
| 2017 | 4 |
| 2018 | 14 |
| 2019 | 7 |
| 2020 | 10 |
| 2021 | 12 |
| 2022 | 27 |
| 2023 | 19 |
| 2024 | 1 |

## Latest CVEs

| CVE | Title | Severity | CVSS | EPSS | CISA KEV | Published |
| --- | --- | --- | --- | --- | --- | --- |
| CVE-2024-6098 | PTC Kepware ThingWorx Kepware Server Allocation of Resources Without Limits or Throttling | medium | 5.9 | 0.4% | No | 2024-08-16 |
| CVE-2023-5909 | Improper Validation of Certificate with Host Mismatch in PTC KEPServerEx | high | 7.5 | 0.4% | No | 2023-11-30 |
| CVE-2023-5908 | Heap Based Buffer Overflow in PTC KEPServerEx | critical | 9.1 | 1.0% | No | 2023-11-30 |
| CVE-2023-0898 | Uncontrolled Search Path Element in GE MiCOM S1 Agile | high | 7.3 | 0.3% | No | 2023-11-07 |
| CVE-2023-4487 | GE Digital CIMPLICITY Process Control | high | 7.8 | 0.2% | No | 2023-09-05 |
| CVE-2023-3463 | GE Digital CIMPLICITY Heap-based Buffer Overflow | critical | 9.8 | 0.4% | No | 2023-07-19 |
| CVE-2023-1552 | ToolboxST Deserialization of Untrusted Configuration Data | high | 7.8 | 0.2% | No | 2023-04-11 |
| CVE-2022-2825 | - | critical | 9.8 | 3.4% | No | 2023-03-29 |
| CVE-2022-2848 | - | critical | 9.1 | 3.4% | No | 2023-03-29 |
| CVE-2023-0598 | GE Digital Proficy Code Injection | critical | 9.8 | 0.6% | No | 2023-03-16 |
| CVE-2023-0754 | - | critical | 9.8 | 2.9% | No | 2023-02-23 |
| CVE-2023-0755 | - | critical | 9.8 | 11.8% | No | 2023-02-23 |

## Frequently asked questions

### How many CVEs does GE have?

GE has 129 published CVE records since 2008, including 0 in the last two years.

### How many GE CVEs are in CISA KEV?

None of GE's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

### Which GE products have the most CVEs?

The GE products with the most published CVEs are CIMPLICITY, intelligent platforms proficy hmi/scada cimplicity, industrial gateway server, intelligent platforms proficy real-time information portal, intelligent platforms proficy process systems with cimplicity.

### What are the most common weakness types in GE CVEs?

GE's CVEs most often map to these CWE weakness types: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-20 (Improper Input Validation), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-287 (Improper Authentication).

### Are there public exploits for GE vulnerabilities?

Yes — 7 of GE's CVEs have a known public exploit.

### How many critical GE vulnerabilities are there?

GE has 51 critical and 44 high-severity CVEs.

### What is the average severity of GE CVEs?

The average CVSS base score across GE's scored CVEs is 8.0.

## Related vendors

- [Grokability](https://radicalnotion.ai/vendor/grokability) (131 CVEs)
- [PowerDNS](https://radicalnotion.ai/vendor/powerdns) (131 CVEs)
- [Roundcube](https://radicalnotion.ai/vendor/roundcube) (130 CVEs)
- [GStreamer](https://radicalnotion.ai/vendor/gstreamer) (129 CVEs)
- [Insyde](https://radicalnotion.ai/vendor/insyde) (129 CVEs)
- [sco](https://radicalnotion.ai/vendor/sco) (129 CVEs)
- [LibreNMS](https://radicalnotion.ai/vendor/librenms) (128 CVEs)
- [RSA](https://radicalnotion.ai/vendor/rsa) (128 CVEs)

---

Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/ge). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.