CVE-2022-2790

概要

参考情報

• cisa.gov/uscert/ics/advisories/icsa-22-228-06 · Third Party Advisory

electric's proficy のその他の脆弱性

• CVE-2022-2793高 7.8Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-353 Missing Support for Integrity Check, and has no a…
• CVE-2022-2792高 7.5Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-284 Improper Access Control, and stores project data …
• CVE-2022-2789中 5.5Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-345 Insufficient Verification of Data Authenticity, a…
• CVE-2022-2788高 7.3Emerson Electric's Proficy Machine Edition Version 9.80 and prior is vulnerable to CWE-29 Path Traversal: '\..\Filename', also known as a Zi…