Improper Input Validation in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of service and application crash via crafted traffic from a Man-in-the-Middle (MITM) attack to the component "FrameworX.exe"in the module "fxVPStatcTcp.dll".
References
Link | Resource |
---|---|
https://github.com/boofish/GE_Proficy_Machine_Edition_vul | Broken Link Third Party Advisory |
https://github.com/boofish/GE_Proficy_Machine_Edition_vul/blob/main/vul2/vul2_steps.pdf | Broken Link Third Party Advisory |
Configurations
History
No history.
Information
Published : 2021-07-30 19:15
Updated : 2024-02-28 18:28
NVD link : CVE-2021-29298
Mitre link : CVE-2021-29298
CVE.ORG link : CVE-2021-29298
JSON object : View
Products Affected
emerson
- proficy_machine_edition
CWE
CWE-20
Improper Input Validation