CVE-2022-46660 is a critical vulnerability affecting GE Proficy Historian, allowing an unauthorized user to alter or write files with full control over their path and content. With a CVSS score of 6.5 (Medium), this vulnerability has a low attack complexity and requires low privileges, enabling high integrity impact without affecting confidentiality or availability. While not currently listed in CISA's KEV catalog or having public exploit code in Metasploit or ExploitDB, it has garnered significant community attention with one mention and one media article, indicating awareness among security researchers. SecurityWeek has highlighted its potential for ICS espionage and disruption.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 7.0, < 2023CPE matchmatch criteria | cpe:2.3:a:ge:proficy_historian:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.