GCVE - cpe:2.3:a:emerson:electric\'s_proficy:*:*:*:*:machine:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:emerson:electric\'s_proficy:*:*:*:*:machine:*:*:*

part: a version: * update: *

Vendor	Emerson (`f912a02b-4be0-550b-a08d-4ea8860069db`)
Product	Electric'S Proficy (`247325a6-9198-5735-92ff-f43541e6e331`)
Edition	*
Language	*
Software edition	machine
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-2793`	vulnerable	2026-06-08 05:43:36.464364	Details available MEDIUM (5.9) Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-353 Missing Support for Integrity Check, and has no authentication or authorization of data packets after establishing a connection for the SRTP protocol. Published: 2022-08-19T22:33:42.000Z Updated: 2025-04-16T16:12:08.233Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-06	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2792`	vulnerable	2026-06-08 05:43:36.463880	Details available MEDIUM (6.6) Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-284 Improper Access Control, and stores project data in a directory with improper access control lists. Published: 2022-08-19T22:08:02.000Z Updated: 2025-04-16T16:12:30.667Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-06	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2790`	vulnerable	2026-06-08 05:43:36.461640	Details available MEDIUM (5.9) Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-347 Improper Verification of Cryptographic Signature, and does not properly verify compiled logic (PDT files) and data blocks data (BLD/BLK files). Published: 2022-08-19T22:32:03.000Z Updated: 2025-04-16T16:12:23.536Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-06	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2789`	vulnerable	2026-06-08 05:43:36.461041	Details available MEDIUM (4.7) Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-345 Insufficient Verification of Data Authenticity, and can display logic that is different than the compiled logic. Published: 2022-08-19T22:32:58.000Z Updated: 2025-04-16T16:12:15.697Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-06	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2788`	vulnerable	2026-06-08 05:43:36.460496	Details available LOW (3.9) Emerson Electric's Proficy Machine Edition Version 9.80 and prior is vulnerable to CWE-29 Path Traversal: '\..\Filename', also known as a ZipSlip attack, through an upload procedure which enables attackers to implant a malicious .BLZ file on the PLC. The file can transfer through the engineering station onto Windows in a way that executes the malicious code. Published: 2022-08-19T20:56:05.000Z Updated: 2025-04-16T16:12:38.328Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-06	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.