CVE-2022-43494: High severity ge proficy historian vulnerability
Published Jan 17, 2023
·Updated
An unauthorized user could be able to read any file on the system, potentially exposing sensitive information.
Affected Software
2 affected components
GE Digital Proficy Historian v7.0 and higher versions
GE Proficy Historian>=7.0<2023
Remediation
Information
GE Digital released Proficy Historian 2023 https://www.ge.com/digital/applications/proficy-historian to mitigate these vulnerabilities. SIMs have also been released for all affected versions.Users can find out more about the vulnerabilities, how to obtain, and install the updates by visiting this notification document from GE Digital https://digitalsupport.ge.com/s/article/GE-Digital-Product-Security-Advisory-GED-23-01 .
Event History
Jan 17, 2023
CVE Published
via MITRE·11:48 PM
Data Sourced
via MITRE·11:48 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2022-43494?
CVE-2022-43494 is a vulnerability that allows an unauthorized user to read any file on the system, potentially exposing sensitive information.
2
How does CVE-2022-43494 affect Ge Proficy Historian?
CVE-2022-43494 affects Ge Proficy Historian version 7.0 and earlier, allowing an unauthorized user to read any file on the system.
3
What is the severity of CVE-2022-43494?
CVE-2022-43494 has a severity rating of 6.5, which is classified as high.
4
How can an unauthorized user exploit CVE-2022-43494?
An unauthorized user can exploit CVE-2022-43494 by gaining access to the system and reading files that contain sensitive information.
5
How can I fix CVE-2022-43494?
To fix CVE-2022-43494, users should update Ge Proficy Historian to a version later than 7.0 or apply the necessary security patches provided by the vendor.