Electric's Proficy

electric's_proficy

Vendor: Emerson • 5 CVEs

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-2793 1Emerson 1Electric's Proficy Jun 17, 2026 Aug 19, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-353 Missing Support for Integrity Check, and has no authentication or authorization of data packets after establishing a connection f...Show more Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-353 Missing Support for Integrity Check, and has no authentication or authorization of data packets after establishing a connection for the SRTP protocol.Show less
CVE-2022-2792 1Emerson 1Electric's Proficy Jun 17, 2026 Aug 19, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-284 Improper Access Control, and stores project data in a directory with improper access control lists.
CVE-2022-2790 1Emerson 1Electric's Proficy Jun 17, 2026 Aug 19, 2022 N/A· v4 5.9 MEDIUM· v3 N/A· v2 Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-347 Improper Verification of Cryptographic Signature, and does not properly verify compiled logic (PDT files) and data blocks data (B...Show more Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-347 Improper Verification of Cryptographic Signature, and does not properly verify compiled logic (PDT files) and data blocks data (BLD/BLK files).Show less
CVE-2022-2789 1Emerson 1Electric's Proficy Jun 17, 2026 Aug 19, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-345 Insufficient Verification of Data Authenticity, and can display logic that is different than the compiled logic.
CVE-2022-2788 1Emerson 1Electric's Proficy Jun 17, 2026 Aug 19, 2022 N/A· v4 7.3 HIGH· v3 N/A· v2 Emerson Electric's Proficy Machine Edition Version 9.80 and prior is vulnerable to CWE-29 Path Traversal: '\..\Filename', also known as a ZipSlip attack, through an upload procedure which enables attackers to implant a m...Show more Emerson Electric's Proficy Machine Edition Version 9.80 and prior is vulnerable to CWE-29 Path Traversal: '\..\Filename', also known as a ZipSlip attack, through an upload procedure which enables attackers to implant a malicious .BLZ file on the PLC. The file can transfer through the engineering station onto Windows in a way that executes the malicious code.Show less