GE Vernova CIMPLICITY

A low-privileged local user on a CIMPLICITY system could escalate their privileges to gain higher access, potentially allowing them to modify control logic, process parameters, or disrupt operations.

Manufacturing plants using GE Vernova CIMPLICITY for supervisory control and monitoring. This affects operators, engineers, and technicians with user accounts on CIMPLICITY workstations, and poses risk to any HMI or engineering workstations that manage process control logic or setpoints.

An attacker with local access to a CIMPLICITY workstation or HMI (human-machine interface) computer could exploit a privilege escalation vulnerability to run commands at a higher privilege level. This requires the attacker to already have a user account or local shell access on the system.