Project Conversion Vulnerability in EcoStruxure Operator Terminal Expert and Pro-face BLUE

CVE-2022-41668

What is CVE-2022-41668?

An incorrect project conversion vulnerability exists in EcoStruxure Operator Terminal Expert and Pro-face BLUE, enabling adversaries with local user privileges to exploit this flaw. By loading a project file from a network share controlled by an attacker, an adversary could execute malicious code, significantly compromising system integrity and security.

References