CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 3.9. It affects Windows.
CVE
CVE-2022-2788
Severity
LOW
CVSS
3.9
EPSS
0.23%
Windows
Original NVD Description
Emerson Electric's Proficy Machine Edition Version 9.80 and prior is vulnerable to CWE-29 Path Traversal: '\..\Filename', also known as a ZipSlip attack, through an upload procedure which enables attackers to implant a malicious .BLZ file on the PLC. The file can transfer through the engineering station onto Windows in a way that executes the malicious code.
Related CVEs
Other vulnerabilities affecting the same vendor(s)