Even if the authentication fails for local service authentication, the requested command could still execute regardless of authentication status.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HGe Proficy Historian
APPGe7.0 β 2023 (bez)
π’
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
Related vulnerabilities
CVE-2022-38469HIGH7.5ten sam produkt
An unauthorized user with network access and the decryption key could decrypt sensitive data, such as user...
CVE-2022-43494HIGH7.5ten sam produkt
An unauthorized user could be able to read any file on the system, potentially exposing sensitive informatio...
CVE-2022-46331HIGH7.5ten sam produkt
An unauthorized user could possibly delete any file on the system.
CVE-2022-46660HIGH7.5ten sam produkt
An unauthorized user could alter or write files with full control over the path and content of the file. ...
CVE-2023-5908CRITICAL9.1PL βten sam vendor
Buffer overflow w KEPServerEX umoΕΌliwiajΔ cy crash lub wyciek danych