Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

emerson / electric's_proficy CVEs

Beta · best-effort

5 CVEs tagged to emerson / electric's_proficy — 0 Critical, 0 High, 4 Medium, 1 Low, 0 Unrated.

See this archive with more filtersBack to emerson vendor archive

CVE-2022-2793

Published Aug 19, 2022

Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-353 Missing Support for Integrity Check, and has no authentication or authorization of data…

CVSS 5.9 · Medium
Vendor/product tagsBeta · best-effort

CVE-2022-2792

Published Aug 19, 2022

Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-284 Improper Access Control, and stores project data in a directory with improper access con…

CVSS 6.6 · Medium
Vendor/product tagsBeta · best-effort

CVE-2022-2790

Published Aug 19, 2022

Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-347 Improper Verification of Cryptographic Signature, and does not properly verify compiled…

CVSS 5.9 · Medium
Vendor/product tagsBeta · best-effort

CVE-2022-2789

Published Aug 19, 2022

Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-345 Insufficient Verification of Data Authenticity, and can display logic that is different…

CVSS 4.7 · Medium
Vendor/product tagsBeta · best-effort

CVE-2022-2788

Published Aug 19, 2022

Emerson Electric's Proficy Machine Edition Version 9.80 and prior is vulnerable to CWE-29 Path Traversal: '\..\Filename', also known as a ZipSlip attack, through an upload procedu…

CVSS 3.9 · Low
Vendor/product tagsBeta · best-effort
Showing 1-5 of 5 CVEsPage 1 of 1