CVE-2022-41669

Name of the Vulnerable Software and Affected Versions EcoStruxure Operator Terminal Expert versions prior to V3.3 Hotfix 1 Pro-face BLUE versions prior to V3.3 Hotfix 1

Description The issue is related to an improper verification of cryptographic signature in the SGIUtility component. This could allow an adversary with local user privileges to load a malicious DLL, potentially resulting in the execution of malicious code.

Recommendations For EcoStruxure Operator Terminal Expert versions prior to V3.3 Hotfix 1, update to a version that includes the fix for this issue. For Pro-face BLUE versions prior to V3.3 Hotfix 1, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the SGIUtility component to minimize the risk of exploitation.