Description
Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-434 Unrestricted Upload of File with Dangerous Type, and will upload any file written into the PLC logic folder to the connected PLC.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Emerson Electric | Proficy Machine Edition | ≤ 9.00 | — |
Advisories 1
- ICSA-22-228-06 Emerson Proficy Machine Edition CISA ICS & IT advisories · Aug 16, 2022
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-06 government-resource