CVE-2022-2002

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

GE CIMPICITY versions 2022 and prior is

vulnerable when data from faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, which could allow an attacker to execute arbitrary code.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-822

Affected software

No affected versions have been published.

Timeline

Published
Dec 7, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-200205.5In libvcodecdrv, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure wCVE-2022-200216.5In Bluetooth, there is a possible application crash due to bluetooth does not properly handle the reception of multiple LMP_host_connection_CVE-2022-200226.5In Bluetooth, there is a possible link disconnection due to bluetooth does not properly handle a connection attempt from a host with the samCVE-2022-200236.5In Bluetooth, there is a possible application crash due to bluetooth flooding a device with LMP_AU_rand packet. This could lead to remote deCVE-2022-200247.8In system service, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilegeCVE-2022-200257.8In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with nCVE-2022-200267.8In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with nCVE-2022-200277.8In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with nCVE-2022-200287.8In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with nCVE-2022-200294.4In cmdq driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure witCVE-2022-20039.1AutomationDirect DirectLOGIC is vulnerable to a specifically crafted serial message to the CPU serial port that will cause the PLC to responCVE-2022-200306.7In vow driver, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local escalation of privileg
CVE-2022-2002: High severity, CVSS 7.8 | Vulnix