CVE-2022-2788 : Security Advisory and Response
Learn about CVE-2022-2788, a path traversal vulnerability in Emerson Electric's Proficy Machine Edition software version 9.80 and earlier. Understand the impact, technical details, and mitigation steps.
A vulnerability has been identified in Emerson Electric's Proficy Machine Edition software version 9.80 and prior that can be exploited by attackers to execute malicious code on the PLC.
Understanding CVE-2022-2788
This CVE involves a path traversal vulnerability, also known as a ZipSlip attack, that allows for the implantation of a malicious .BLZ file through an upload procedure.
What is CVE-2022-2788?
Emerson Electric's Proficy Machine Edition version 9.80 and earlier is susceptible to a CWE-29 Path Traversal vulnerability. Attackers can upload a malicious file onto the PLC, which can then transfer to Windows and execute the malicious code.
The Impact of CVE-2022-2788
The vulnerability has a low severity impact, with a CVSS base score of 3.9. It requires local access and user interaction for exploitation, affecting confidentiality, integrity, and availability to a low extent.
Technical Details of CVE-2022-2788
This section provides more technical insights into the vulnerability.
Vulnerability Description
The flaw in Proficy Machine Edition version 9.80 and prior allows for a path traversal attack, enabling the upload of a malicious .BLZ file onto the PLC.
Affected Systems and Versions
All versions of Proficy Machine Edition up to 9.80 are impacted by this vulnerability.
Exploitation Mechanism
Attackers can exploit this vulnerability through an upload procedure, transferring the malicious file to Windows and executing harmful code.
Mitigation and Prevention
Discover the necessary steps to secure your systems against CVE-2022-2788.
Immediate Steps to Take
Users should apply security patches provided by Emerson Electric promptly. Limit access to engineering stations to trusted personnel only.
Long-Term Security Practices
Enhance security measures by regularly updating and monitoring systems, restricting access to critical components.
Patching and Updates
Keep systems up to date with the latest software patches and security updates to prevent exploitation of known vulnerabilities.