Emerson Proficy Machine Edition vulnerabilities

2 CVEs affecting Emerson Proficy Machine Edition, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-29298, published 2021-07-30.

More from Emerson.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-29297, published 2021-07-30. Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days. Buffer Overflow in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of service and application crash via crafted traffic from a Man-in-the-Middle (MITM) attack…
• CVE-2021-29298, published 2021-07-30. Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days. Improper Input Validation in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of service and application crash via crafted traffic from a Man-in-the-Middle…