Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-434 Unrestricted Upload of File with Dangerous Type, and will upload any file written into the PLC logic folder to the connected PLC.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
Vulnerability Type
危险类型文件的不加限制上传
Vulnerability Title
Emerson Proficy Machine Edition 代码问题漏洞
Vulnerability Description
Emerson Proficy Machine Edition是美国艾默生电气（Emerson）公司的一个应用软件。一个自动化解决方案。 Emerson Proficy Machine Edition 9.00及之前版本存在代码问题漏洞，该漏洞源于会将写入 PLC 逻辑文件夹的任何文件上传到连接的 PLC。
CVSS Information
N/A
Vulnerability Type
N/A