PT-2022-18671 · Emerson Electric · Proficy Machine Edition

Sharon Brizinov · Published 2022-08-19 · Updated 2022-08-23 · CVE-2022-2789

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Emerson Electric's Proficy Machine Edition versions 9.00 and prior

Description The issue concerns insufficient verification of data authenticity, which can cause the software to display logic that differs from the compiled logic.

Recommendations For versions 9.00 and prior, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

Related Identifiers

CVE-2022-2789

Affected Products

Proficy Machine Edition

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-2789 · Security Note
• https://osv.dev/vulnerability/CVE-2022-2789 · Vendor Advisory
• https://t.me/true_secator/3323 · Telegram Post
• https://cisa.gov/uscert/ics/advisories/icsa-22-228-06 · Note