PT-2019-14643 · Emerson Ge Automation · Proficy Machine Edition

Published 2019-09-16 · Updated 2021-07-21 · CVE-2019-16353

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Emerson GE Automation Proficy Machine Edition version 8.0

Description The issue allows for an access violation and application crash via crafted traffic from a remote device. This has been demonstrated using an RX7i device.

Recommendations For Emerson GE Automation Proficy Machine Edition version 8.0, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2019-16353

Affected Products

Proficy Machine Edition

References · 3

• 🔥❌ https://github.com/boofish/GE_Proficy_Machine_Edition_Vuln/blob/master/README.md · Exploit, Deleted
• https://osv.dev/vulnerability/CVE-2019-16353 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-16353 · Security Note