CVE-2022-2789CWE-345

Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-345 Insufficient Verification of Data Authenticity, and can display…

Medium · published August 19, 2022

CVSS v3.1
4.7
EPSS
0%
Percentile
1.9
In the wild
Unconfirmed
What it is

Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-345 Insufficient Verification of Data Authenticity, and can display logic that is different than the compiled logic.

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00122 · 1.9th percentile
Weakness
CWE-345 · Insufficient Verification of Data Authenticity
Published
2022-08-19T22:32Z
EPSS history
Timeline
  • 19 AUG 22:32Z
    Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-345 Insufficient Verification of Data Authenticity, and can display…
    cvelistv5