CVE-2022-38469

An unauthorized user with network access and the decryption key could decrypt sensitive data, such as usernames and passwords.

Score

CVSS 3.1 7.5 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2023-01-18

Last modified

2025-01-16

Weaknesses

CWE-261, CWE-522

Affected products

• Proficy Historian (Ge)
• Proficy Historian (Ge Digital)

References

• https://digitalsupport.ge.com/s/article/GE-Digital-Product-Security-Advisory-GED-23-01
• https://www.cisa.gov/uscert/ics/advisories/icsa-23-017-01