Lucene search
HistoryJan 18, 2023 - 12:15 a.m.
CVE-2022-46732
cve-2022-46732
authentication bypass
local service
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.7 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
58.8%
Even if the authentication fails for local service authentication, the requested command could still execute regardless of authentication status.
Affected configurations
Node
geproficy_historianRange7.0–2023
Related
cvelist
cvelist
CVE-2022-46732 CVE-2022-46732
2023-01-17 23:31:14
prion
prion
Authentication flaw
2023-01-18 00:15:00
cve
cve
CVE-2022-46732
2023-01-18 00:15:12
ics
ics
GE Digital Proficy Historian
2023-01-17 12:00:00
thn
thn
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.7 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
58.8%
Related for NVD:CVE-2022-46732