CVE-2022-46660

概要

参考情報

• digitalsupport.ge.com/s/article/GE-Digital-Product-Security-Advisory-GED-23-01 · Permissions Required
• cisa.gov/uscert/ics/advisories/icsa-23-017-01 · Third Party Advisory

proficy historian のその他の脆弱性

• CVE-2022-46732緊急 9.8Even if the authentication fails for local service authentication, the requested command could still execute regardless of authentication st…
• CVE-2022-46331高 8.1 An unauthorized user could possibly delete any file on the system.
• CVE-2022-43494中 6.5 An unauthorized user could be able to read any file on the system, potentially exposing sensitive information.
• CVE-2022-38469高 7.5 An unauthorized user with network access and the decryption key could decrypt sensitive data, such as usernames and passwords. …