Medium severity6.5NVD Advisory· Published Jan 3, 2023· Updated Jun 17, 2026

CVE-2022-2967

Description

Prosys OPC UA Simulation Server version prior to v5.3.0-64 and UA Modbus Server versions 1.4.18-5 and prior do not sufficiently protect credentials, which could allow an attacker to obtain user credentials and gain access to system data.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Prosysopc/Ua Modbus Server
cpe:2.3:a:prosysopc:ua_modbus_server:*:*:*:*:*:*:*:*
Range: <1.4.20
Prosysopc/Ua Simulation Server
cpe:2.3:a:prosysopc:ua_simulation_server:*:*:*:*:*:*:*:*
Range: <5.4.0
Prosys/UA Modbus Serverllm-fuzzy
Range: 1.4.18-5 and prior
Prosys/Ua Simulation Serverllm-fuzzy2 versions
<5.3.0-64+ 1 more
- (no CPE)range: <5.3.0-64
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

www.cisa.gov/uscert/ics/advisories/icsa-22-349-01nvdPatchThird Party AdvisoryUS Government Resource
www.prosysopc.com/blog/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000