Description
Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-353 Missing Support for Integrity Check, and has no authentication or authorization of data packets after establishing a connection for the SRTP protocol.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Emerson Electric | Proficy Machine Edition | all – ≤ 9.00 | — |
Advisories 1
- ICSA-22-228-06 Emerson Proficy Machine Edition CISA ICS & IT advisories · Aug 16, 2022