CVE-2022-2967
Medium
Description
Prosys OPC UA Simulation Server version prior to v5.3.0-64 and UA Modbus Server versions 1.4.18-5 and prior do not sufficiently protect credentials, which could allow an attacker to obtain user credentials and gain access to system data.
SeverityMedium
CVSS6.5
Exploit probability—
ProductProsysopc Ua Modbus Server
PublishedJan 3, 2023
First seenJan 3, 2023
Weakness typeCWE-522CWE-522
How to fix
Update
- prosysopc ua_modbus_server1.4.20 or later
- prosysopc ua_simulation_server5.4.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| prosysopc ua_modbus_server | v < 1.4.20 | 1.4.20 |
| prosysopc ua_simulation_server | v < 5.4.0 | 5.4.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.