CVE-2022-2791

Publication date

2022-11-22 19:19:29

Family

icscert

State

PUBLISHED

Description

Emerson Electrics Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-434 Unrestricted Upload of File with Dangerous Type, and will upload any file written into the PLC logic folder to the connected PLC.