{"id":"CVE-2022-46331","state":"PUBLISHED","title":"CVE-2022-46331","description":"\n\n\nAn unauthorized user could possibly delete any file on the system. \n\n \n\n \n\n \n\n","publishedAt":"2023-01-17T23:49:42.351Z","updatedAt":"2025-01-16T22:00:49.355Z","severity":{"score":7.5,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","source":"icscert"},"assigner":"icscert","products":["GE Digital  Proficy Historian"],"affected":[{"vendor":"GE Digital ","product":"Proficy Historian","defaultStatus":"unaffected","versions":[{"version":"7.0","status":"affected"}]}],"references":["https://www.cisa.gov/uscert/ics/advisories/icsa-23-017-01","https://digitalsupport.ge.com/s/article/GE-Digital-Product-Security-Advisory-GED-23-01"],"weaknesses":["CWE-284"],"ingestedAt":"2026-10-29T19:50:53.608Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/46xxx/CVE-2022-46331.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-46331","state":"PUBLISHED","datePublished":"2023-01-17T23:49:42.351Z","dateUpdated":"2025-01-16T22:00:49.355Z","assignerShortName":"icscert","assignerOrgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","dateReserved":"2022-12-15T18:53:06.219Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"\n\n\nAn unauthorized user could possibly delete any file on the system. \n\n \n\n \n\n \n\n"}],"affected":[{"vendor":"GE Digital ","product":"Proficy Historian","defaultStatus":"unaffected","versions":[{"version":"7.0","status":"affected"}]}],"references":[{"url":"https://www.cisa.gov/uscert/ics/advisories/icsa-23-017-01"},{"url":"https://digitalsupport.ge.com/s/article/GE-Digital-Product-Security-Advisory-GED-23-01"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-284","description":"CWE-284 Improper Access Control","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"icscert","orgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","dateUpdated":"2023-01-17T23:49:42.351Z"},"credits":[{"lang":"en","type":"reporter","user":"00000000-0000-4000-9000-000000000000","value":"Uri Katz of Claroty Research reported these vulnerabilities to GE. "}],"datePublic":"2023-01-17T23:25:00.000Z","solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"\nGE Digital released <a target=\"_blank\" rel=\"nofollow\" href=\"https://www.ge.com/digital/applications/proficy-historian\">Proficy Historian 2023</a>&nbsp;<span style=\"background-color: var(--wht);\">to mitigate these vulnerabilities. &nbsp;SIMs have also been released for all affected versions.</span><p>Users can find out more about the vulnerabilities, how to obtain, and install the updates by visiting <a target=\"_blank\" rel=\"nofollow\" href=\"https://digitalsupport.ge.com/s/article/GE-Digital-Product-Security-Advisory-GED-23-01\">this notification document from GE Digital</a><span style=\"background-color: var(--wht);\">.&nbsp;&nbsp;</span></p>"}],"value":"GE Digital released  Proficy Historian 2023 https://www.ge.com/digital/applications/proficy-historian  to mitigate these vulnerabilities.  SIMs have also been released for all affected versions.Users can find out more about the vulnerabilities, how to obtain, and install the updates by visiting  this notification document from GE Digital https://digitalsupport.ge.com/s/article/GE-Digital-Product-Security-Advisory-GED-23-01 .  \n\n"}],"source":{"discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.cisa.gov/uscert/ics/advisories/icsa-23-017-01","tags":["x_transferred"]},{"url":"https://digitalsupport.ge.com/s/article/GE-Digital-Product-Security-Advisory-GED-23-01","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T14:31:46.209Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-01-16T20:57:10.842351Z","id":"CVE-2022-46331","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-01-16T22:00:49.355Z"}}]}}}