CVE-2022-43494
First published: Tue Jan 17 2023(Updated: )
An unauthorized user could be able to read any file on the system, potentially exposing sensitive information.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ge Proficy Historian | >=7.0<2023 | |
| GE Digital Proficy Historian v7.0 and higher versions |
Remedy
GE Digital released Proficy Historian 2023 https://www.ge.com/digital/applications/proficy-historian to mitigate these vulnerabilities. SIMs have also been released for all affected versions.Users can find out more about the vulnerabilities, how to obtain, and install the updates by visiting this notification document from GE Digital https://digitalsupport.ge.com/s/article/GE-Digital-Product-Security-Advisory-GED-23-01 .
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-43494?
CVE-2022-43494 is a vulnerability that allows an unauthorized user to read any file on the system, potentially exposing sensitive information.
How does CVE-2022-43494 affect Ge Proficy Historian?
CVE-2022-43494 affects Ge Proficy Historian version 7.0 and earlier, allowing an unauthorized user to read any file on the system.
What is the severity of CVE-2022-43494?
CVE-2022-43494 has a severity rating of 6.5, which is classified as high.
How can an unauthorized user exploit CVE-2022-43494?
An unauthorized user can exploit CVE-2022-43494 by gaining access to the system and reading files that contain sensitive information.
How can I fix CVE-2022-43494?
To fix CVE-2022-43494, users should update Ge Proficy Historian to a version later than 7.0 or apply the necessary security patches provided by the vendor.
- collector/nvd-index
- agent/type
- agent/references
- agent/weakness
- agent/author
- collector/ics-cert-advisory
- source/ICS
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/remedy
- agent/description
- agent/event
- agent/tags
- agent/first-publish-date
- vendor/ge
- canonical/ge proficy historian
- version/ge proficy historian/7.0
- vendor/ge digital
- canonical/ge digital proficy historian v7.0 and higher versions