CVE-2022-21798: Ge Cimplicity

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

The affected product is vulnerable due to cleartext transmission of credentials seen in the CIMPLICITY network, which can be easily spoofed and used to log in to make operational changes to the system.

Affected products

• Ge Cimplicity: any version

Published 2022-02-25. Last modified 2026-06-17.