Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-434 Unrestricted Upload of File with Dangerous Type, and will upload any file written into the PLC logic folder to the connected PLC.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-06 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: icscert
Published: 2022-11-22T19:19:29.460Z
Updated: 2024-08-03T00:46:04.492Z
Reserved: 2022-08-11T19:47:28.251Z
Link: CVE-2022-2791
Vulnrichment
No data.
NVD
Status : Modified
Published: 2022-11-22T20:15:10.917
Modified: 2024-11-21T07:01:42.120
Link: CVE-2022-2791
Redhat
No data.