ICSA-23-017-01

icsaUScisa_csaf_ot

GE Digital Proficy Historian

Advisory ansehen veröffentlicht 2023-01-17

Successful exploitation of these vulnerabilities could crash the device after access, cause a buffer overflow condition, and allow remote code execution.

01

beschreibt (5)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2022-46732UScritical9.8OT erhöht—
Even if the authentication fails for local service authentication, the requested command could still execute regardless of authentication status.
CVE-2022-46660USmedium6.5—
An unauthorized user could alter or write files with full control over the path and content of the file.
CVE-2022-46331UShigh8.1—
An unauthorized user could possibly delete any file on the system.
CVE-2022-43494USmedium6.5—
An unauthorized user could be able to read any file on the system, potentially exposing sensitive information.
CVE-2022-38469UShigh7.5—
An unauthorized user with network access and the decryption key could decrypt sensitive data, such as usernames and passwords.
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (10)

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan