Design/Logic Flaw

2022-08-1923:15:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.3%

JSON

Emerson Electric’s Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-353 Missing Support for Integrity Check, and has no authentication or authorization of data packets after establishing a connection for the SRTP protocol.

CPENameOperatorVersion
electric\\'s_proficyle9.0.0

CPE	Name	Operator	Version
	electric\\'s_proficy	le	9.0.0

References

www.cisa.gov/uscert/ics/advisories/icsa-22-228-06