GE Digital Proficy Historian
Successful exploitation of these vulnerabilities could crash the device after access, cause a buffer overflow condition, and allow remote code execution.
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-46732US | critical9.8OT elevated | — | ||
Even if the authentication fails for local service authentication, the requested command could still execute regardless of authentication status. | ||||
| CVE-2022-46660US | medium6.5 | — | ||
An unauthorized user could alter or write files with full control over the path and content of the file.
| ||||
| CVE-2022-46331US | high8.1 | — | ||
An unauthorized user could possibly delete any file on the system.
| ||||
| CVE-2022-43494US | medium6.5 | — | ||
An unauthorized user could be able to read any file on the system, potentially exposing sensitive information.
| ||||
| CVE-2022-38469US | high7.5 | — | ||
An unauthorized user with network access and the decryption key could decrypt sensitive data, such as usernames and passwords.
| ||||
references
External citations — patches, advisories, analysis.
remediations (10)
- MitigationProficy Historian
Users can find out more about the vulnerabilities, how to obtain, and install the updates by visiting this notification document from GE Digital.
https://digitalsupport.ge.com/s/article/GE-Digital-Product-Security-Advisory-GED-23-01 - MitigationProficy Historian
Users can find out more about the vulnerabilities, how to obtain, and install the updates by visiting this notification document from GE Digital.
https://digitalsupport.ge.com/s/article/GE-Digital-Product-Security-Advisory-GED-23-01 - MitigationProficy Historian
Users can find out more about the vulnerabilities, how to obtain, and install the updates by visiting this notification document from GE Digital.
https://digitalsupport.ge.com/s/article/GE-Digital-Product-Security-Advisory-GED-23-01 - MitigationProficy Historian
Users can find out more about the vulnerabilities, how to obtain, and install the updates by visiting this notification document from GE Digital.
https://digitalsupport.ge.com/s/article/GE-Digital-Product-Security-Advisory-GED-23-01 - MitigationProficy Historian
Users can find out more about the vulnerabilities, how to obtain, and install the updates by visiting this notification document from GE Digital.
https://digitalsupport.ge.com/s/article/GE-Digital-Product-Security-Advisory-GED-23-01 - FixedProficy Historian
GE Digital released Proficy Historian 2023 to mitigate these vulnerabilities. SIMs have also been released for all affected versions.
https://www.ge.com/digital/applications/proficy-historian - FixedProficy Historian
GE Digital released Proficy Historian 2023 to mitigate these vulnerabilities. SIMs have also been released for all affected versions.
https://www.ge.com/digital/applications/proficy-historian - FixedProficy Historian
GE Digital released Proficy Historian 2023 to mitigate these vulnerabilities. SIMs have also been released for all affected versions.
https://www.ge.com/digital/applications/proficy-historian - FixedProficy Historian
GE Digital released Proficy Historian 2023 to mitigate these vulnerabilities. SIMs have also been released for all affected versions.
https://www.ge.com/digital/applications/proficy-historian - FixedProficy Historian
GE Digital released Proficy Historian 2023 to mitigate these vulnerabilities. SIMs have also been released for all affected versions.
https://www.ge.com/digital/applications/proficy-historian
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan