Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-2793

Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-353 Missing Support for Integrity Check, and has no authentication or authorization of data packets after establishing a connection for the SRTP protocol.

Published

2022-08-19T23:15:09.410

Last Modified

2024-11-21T07:01:42.330

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.9 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-353
  • Type: Primary
    CWE-345
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application emerson electric\'s_proficy ≤ 9.0.0 Yes
References