CVE-2022-46660
Published on: Not Yet Published
Last Modified on: 01/25/2023 04:52:00 PM UTC
Certain versions of Proficy Historian from Ge contain the following vulnerability:
An unauthorized user could alter or write files with full control over the path and content of the file.
- CVE-2022-46660 has been assigned by
[email protected] to track the vulnerability - currently rated as MEDIUM severity. - Affected Vendor/Software: GE Digital - Proficy Historian version = 7.0
CVSS3 Score: 6.5 - MEDIUM
| Attack Vector ⓘ |
Attack Complexity |
Privileges Required |
User Interaction |
|---|---|---|---|
| NETWORK | LOW | LOW | NONE |
| Scope | Confidentiality Impact |
Integrity Impact |
Availability Impact |
| UNCHANGED | NONE | HIGH | NONE |
CVE References
| Description | Tags ⓘ | Link |
|---|---|---|
| No Description Provided | digitalsupport.ge.com text/html |
MISC digitalsupport.ge.com/s/article/GE-Digital-Product-Security-Advisory-GED-23-01 |
| GE Digital Proficy Historian | CISA | www.cisa.gov text/html |
MISC www.cisa.gov/uscert/ics/advisories/icsa-23-017-01 |
There are currently no QIDs associated with this CVE
Exploit/POC from Github
An unauthorized user could alter or write files with full control over the path and content of the file. CVE project by
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Ge | Proficy Historian | All | All | All | All |
- cpe:2.3:a:ge:proficy_historian:*:*:*:*:*:*:*:*:
No vendor comments have been submitted for this CVE
Social Mentions
| Source | Title | Posted (UTC) |
|---|