CVE-2023-3463

CVE-2023-3463 is a critical memory corruption vulnerability affecting all versions of GE Digital CIMPLICITY that do not adhere to SDG guidance and accept untrusted documents. This flaw stems from insufficient input validation, leading to various issues like out-of-bounds reads/writes and buffer overflows. With a CVSS score of 9.8 (CRITICAL), this vulnerability is remotely exploitable with low attack complexity, allowing an unauthenticated attacker to achieve arbitrary code execution with high impact on confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage, indicating awareness within the cybersecurity community.