[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fj6uZpvXRid0qGUodzTwqBmSkVxPhw_V6tvT1iTCvOBE":3,"g5a-risk:CVE-2023-3463":113},{"success":4,"data":5,"meta":110},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":41,"epssPercentile":27,"epssTimeSeries":42,"severity":43,"affectedProducts":44,"affectedProductsCount":50,"references":51,"referencesCount":50,"weaknesses":58,"weaknessesCount":72,"isActivelyExploited":73,"cisaInfo":27,"otxData":27,"relatedBlogPosts":74,"seoMetadata":75,"configurations":100,"relatedVendorCves":108,"notableEvents":109},"CVE-2023-3463","What is CVE-2023-3463?","All versions of GE Digital CIMPLICITY that are not adhering to SDG guidance and accepting documents from untrusted sources are vulnerable to memory corruption issues due to insufficient input validation, including issues such as out-of-bounds reads and writes, use-after-free, stack-based buffer overflows, uninitialized pointers, and a heap-based buffer overflow. Successful exploitation could allow an attacker to execute arbitrary code.","All versions of GE Digital CIMPLICITY that are not adhering to SDG guidance and accepting documents from untrusted sources are vulnerable to memory corruptio...","2023-07-19T14:15:10.62","2023-07-28T13:47:16.15",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":27,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":39,"ImpactScore":40},"ics-cert@hq.dhs.gov","Secondary",{"Version":20,"VectorString":34,"AttackVector":35,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":36,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":25,"BaseScore":37,"BaseSeverity":38,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:H","LOCAL","REQUIRED",6.6,"MEDIUM",1.8,4.7,0.00383,[41,41,41,41,41,41,41],"Critical",[45],{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"ge","cimplicity","*","cpe:2.3:a:ge:cimplicity:*:*:*:*:*:*:*:*",1,[52],{"url":53,"source":54,"tags":55},"https:\u002F\u002Fwww.cisa.gov\u002Fnews-events\u002Fics-advisories\u002Ficsa-23-199-06","CISA",[56,57],"Third Party Advisory","US Government Resource",[59,67],{"id":60,"name":61,"description":62,"extendedDescription":63,"status":64,"abstraction":65,"structure":66},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",{"id":68,"name":69,"description":70,"extendedDescription":63,"status":64,"abstraction":71,"structure":66},"CWE-122","Heap-based Buffer Overflow","A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().","Variant",2,false,[],{"title":76,"metaDescription":77,"keywords":78,"canonicalUrl":79,"structuredData":80},"What is CVE-2023-3463? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-3463, a critical severity cyber security vulnerability from 2023. All versions of GE Digital CIMPLICITY that are not adher...","CVE-2023-3463, CVE-2023-3463 vulnerability, CVE-2023-3463 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, ge security, cimplicity vulnerability","\u002Fwhat-is\u002Fcve-2023-3463",{"@context":81,"@type":82,"headline":76,"description":77,"datePublished":10,"dateModified":11,"author":83,"publisher":87,"about":91,"mainEntityOfPage":95,"articleSection":98,"keywords":99},"https:\u002F\u002Fschema.org","TechArticle",{"@type":84,"name":85,"url":86},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":84,"name":85,"url":86,"logo":88},{"@type":89,"url":90},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":92,"name":6,"description":93,"additionalType":94},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":96,"@id":97},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-3463","Cybersecurity","CVE-2023-3463, CVE-2023-3463 vulnerability, CVE-2023-3463 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[101],{"Operator":27,"Negate":27,"Nodes":102},[103],{"Operator":104,"Negate":27,"CPEMatch":105},"OR",[106],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":107,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"B6B27EAE-B866-41DA-A43F-03C218C6E800",[],[],{"lastModified":11,"cacheTime":111,"version":112},1792356107577,"2.0",{"score":114,"band":115,"action":116,"scoredAt":117},55,"Medium","Plan remediation","2026-10-16T06:58:39.672731+00:00"]