Lucene search
HistoryJan 18, 2023 - 12:15 a.m.
CVE-2022-46732
cve-2022-46732
authentication bypass
local service
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.7
Confidence
High
EPSS
0.002
Percentile
59.6%
Even if the authentication fails for local service authentication, the requested command could still execute regardless of authentication status.
Affected configurations
Node
geproficy_historianRange7.0–2023
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ge | proficy_historian | * | cpe:2.3:a:ge:proficy_historian:*:*:*:*:*:*:*:* |
Related
prion
prion
Authentication flaw
2023-01-18 00:15:00
cve
cve
CVE-2022-46732
2023-01-18 00:15:12
cvelist
cvelist
CVE-2022-46732 CVE-2022-46732
2023-01-17 23:31:14
ics
ics
GE Digital Proficy Historian
2023-01-17 12:00:00
thn
thn
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.7
Confidence
High
EPSS
0.002
Percentile
59.6%
Related for NVD:CVE-2022-46732