CVE-2022-23921

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Exploitation of this vulnerability may result in local privilege escalation and code execution. GE maintains exploitation of this vulnerability is only possible if the attacker has login access to a machine actively running CIMPLICITY, the CIMPLICITY server is not already running a project, and the server is licensed for multiple projects.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

No affected versions have been published.

Timeline

Published
Feb 25, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-239227.8WIN-911 2021 R1 and R2 are vulnerable to a permissions misconfiguration that may allow an attacker to locally write files to the Program AnnCVE-2022-239239.8All versions of package jailed are vulnerable to Sandbox Bypass via an exported alert() method which can access the main application. ExportCVE-2022-239248.2Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, ArbitraCVE-2022-239258.2Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, ArbitraCVE-2022-239268.2Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, ArbitraCVE-2022-239278.2Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, ArbitraCVE-2022-239288.2Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, ArbitraCVE-2022-239298.2Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, ArbitraCVE-2022-23935.7A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication isCVE-2022-239308.2Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, ArbitraCVE-2022-239318.2Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, ArbitraCVE-2022-239328.2Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitra
CVE-2022-23921: High severity, CVSS 7.8 | Vulnix