Description
Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-347 Improper Verification of Cryptographic Signature, and does not properly verify compiled logic (PDT files) and data blocks data (BLD/BLK files).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Emerson Electric | Proficy Machine Edition | all – ≤ 9.00 | — |
Advisories 1
- ICSA-22-228-06 Emerson Proficy Machine Edition CISA ICS & IT advisories · Aug 16, 2022