CVE-2022-46732

GE Digital Proficy Historian is affected by CVE-2022-46732, an authentication bypass vulnerability that allows commands to be executed even when local service authentication fails. Impact is high (CVSS v3.1 base score 9.8) with remote attacker potential, affecting Proficy Historian v7.0 and highe...

CVE-2022-46660

GE Digital Proficy Historian CVE-2022-46660 is a path/unsafe file write vulnerability affecting Proficy Historian (v7.0 and up per ICS advisory context). Connected sources describe exploitation via unrestricted upload of files and MSO protocol handling that allows an unauthorized user to alter or...

CVE-2022-43494

GE Digital Proficy Historian is affected by a vulnerability (CVE-2022-43494) described as improper access control that could allow an unauthorized user to read any file on the system. The issue is tied to insufficient access controls in Proficy Historian v7.0 and newer, enabling potential exposur...

CVE-2022-38469

GE Digital Proficy Historian is affected by CVE-2022-38469, where an unauthorized network attacker with the decryption key could decrypt sensitive data (e.g., usernames and passwords) due to weak cryptography. Connected sources identify the vulnerable component as the Historian platform (v7.0+ pe...

CVE-2022-46331

CVE-2022-46331 affects GE Digital Proficy Historian (noted in ICS advisory ICSA-23-017-01). The vulnerability is due to improper access control, enabling an unauthorized user to delete any file on the system. Affected product scope includes Proficy Historian v7.0 and higher versions; remediation ...