Filtered by vendor Emerson Subscriptions
Filtered by product Electric\'s Proficy Subscriptions
Total 5 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-2793 1 Emerson 1 Electric\'s Proficy 2024-11-21 5.9 Medium
Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-353 Missing Support for Integrity Check, and has no authentication or authorization of data packets after establishing a connection for the SRTP protocol.
CVE-2022-2792 1 Emerson 1 Electric\'s Proficy 2024-11-21 6.6 Medium
Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-284 Improper Access Control, and stores project data in a directory with improper access control lists.
CVE-2022-2790 1 Emerson 1 Electric\'s Proficy 2024-11-21 5.9 Medium
Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-347 Improper Verification of Cryptographic Signature, and does not properly verify compiled logic (PDT files) and data blocks data (BLD/BLK files).
CVE-2022-2789 1 Emerson 1 Electric\'s Proficy 2024-11-21 4.7 Medium
Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-345 Insufficient Verification of Data Authenticity, and can display logic that is different than the compiled logic.
CVE-2022-2788 1 Emerson 1 Electric\'s Proficy 2024-11-21 3.9 Low
Emerson Electric's Proficy Machine Edition Version 9.80 and prior is vulnerable to CWE-29 Path Traversal: '\..\Filename', also known as a ZipSlip attack, through an upload procedure which enables attackers to implant a malicious .BLZ file on the PLC. The file can transfer through the engineering station onto Windows in a way that executes the malicious code.