| Package | Affected versions | Patched versions |
|---|---|---|
| electric's proficy | ≤ 9.80 |
Emerson Electric's Proficy Machine Edition Version 9.80 and prior is vulnerable to CWE-29 Path Traversal: '\..\Filename', also known as a ZipSlip attack, through an upload procedure which enables attackers to implant a malicious .BLZ file on the PLC. The file can transfer through the engineering station onto Windows in a way that executes the malicious code.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free