CVE-2022-46331

Description

References

• digitalsupport.ge.com/s/article/GE-Digital-Product-Security-Advisory-GED-23-01 · Permissions Required
• cisa.gov/uscert/ics/advisories/icsa-23-017-01 · Third Party Advisory

proficy historian의 다른 취약점

• CVE-2022-46732심각 9.8Even if the authentication fails for local service authentication, the requested command could still execute regardless of authentication st…
• CVE-2022-46660보통 6.5 An unauthorized user could alter or write files with full control over the path and content of the file.
• CVE-2022-43494보통 6.5 An unauthorized user could be able to read any file on the system, potentially exposing sensitive information.
• CVE-2022-38469높음 7.5 An unauthorized user with network access and the decryption key could decrypt sensitive data, such as usernames and passwords. …