Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-2791 1 Emerson 1 Proficy 2025-04-16 5.9 Medium
Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-434 Unrestricted Upload of File with Dangerous Type, and will upload any file written into the PLC logic folder to the connected PLC.
CVE-2021-29298 1 Emerson 1 Proficy Machine Edition 2024-11-21 5.3 Medium
Improper Input Validation in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of service and application crash via crafted traffic from a Man-in-the-Middle (MITM) attack to the component "FrameworX.exe"in the module "fxVPStatcTcp.dll".
CVE-2021-29297 1 Emerson 1 Proficy Machine Edition 2024-11-21 5.3 Medium
Buffer Overflow in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of service and application crash via crafted traffic from a Man-in-the-Middle (MITM) attack to the component "FrameworX.exe" in the module "MSVCR100.dll".