CVE-2022-2792: High severity emerson electric's proficy vulnerability
Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-284 Improper Access Control, and stores project data in a directory with improper access control lists.
Affected Software
Event History
Frequently Asked Questions
What is vulnerability CVE-2022-2792?
CVE-2022-2792 is a vulnerability in Emerson Electric's Proficy Machine Edition Version 9.00 and prior that is vulnerable to CWE-284 Improper Access Control.
How severe is vulnerability CVE-2022-2792?
Vulnerability CVE-2022-2792 has a severity rating of 7.5 out of 10, which is considered high.
What is CWE-284?
CWE-284 refers to the Common Weakness Enumeration category for Improper Access Control.
Which version of Emerson Electric's Proficy Machine Edition is affected?
Emerson Electric's Proficy Machine Edition Version 9.00 and prior are affected by vulnerability CVE-2022-2792.
How can I find more information about vulnerability CVE-2022-2792?
You can find more information about vulnerability CVE-2022-2792 at the following reference link: [https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-06](https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-06)