Lucene search

K

Proficy Machine Edition Security Vulnerabilities

cve
cve

CVE-2022-2791

Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-434 Unrestricted Upload of File with Dangerous Type, and will upload any file written into the PLC logic folder to the connected...

7.8CVSS

7.6AI Score

0.0004EPSS

2022-11-22 08:15 PM
27
7
cve
cve

CVE-2022-2792

Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-284 Improper Access Control, and stores project data in a directory with improper access control...

7.5CVSS

7.5AI Score

0.001EPSS

2022-08-19 11:15 PM
28
5
cve
cve

CVE-2022-2793

Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-353 Missing Support for Integrity Check, and has no authentication or authorization of data packets after establishing a connection for the SRTP...

7.8CVSS

7.8AI Score

0.001EPSS

2022-08-19 11:15 PM
34
6
cve
cve

CVE-2022-2789

Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-345 Insufficient Verification of Data Authenticity, and can display logic that is different than the compiled...

5.5CVSS

5.5AI Score

0.0005EPSS

2022-08-19 11:15 PM
32
5
cve
cve

CVE-2022-2790

Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-347 Improper Verification of Cryptographic Signature, and does not properly verify compiled logic (PDT files) and data blocks data (BLD/BLK...

5.9CVSS

5.7AI Score

0.0004EPSS

2022-08-19 11:15 PM
34
6
cve
cve

CVE-2022-2788

Emerson Electric's Proficy Machine Edition Version 9.80 and prior is vulnerable to CWE-29 Path Traversal: '..\Filename', also known as a ZipSlip attack, through an upload procedure which enables attackers to implant a malicious .BLZ file on the PLC. The file can transfer through the engineering...

7.3CVSS

7.1AI Score

0.0004EPSS

2022-08-19 09:15 PM
36
6
cve
cve

CVE-2021-29298

Improper Input Validation in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of service and application crash via crafted traffic from a Man-in-the-Middle (MITM) attack to the component "FrameworX.exe"in the module...

5.3CVSS

5.2AI Score

0.001EPSS

2021-07-30 07:15 PM
56
4
cve
cve

CVE-2021-29297

Buffer Overflow in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of service and application crash via crafted traffic from a Man-in-the-Middle (MITM) attack to the component "FrameworX.exe" in the module...

5.3CVSS

5.2AI Score

0.001EPSS

2021-07-30 07:15 PM
55
4
cve
cve

CVE-2019-16353

Emerson GE Automation Proficy Machine Edition 8.0 allows an access violation and application crash via crafted traffic from a remote device, as demonstrated by an RX7i...

7.5CVSS

7.5AI Score

0.001EPSS

2019-09-16 02:15 PM
26