Inadequate encryption may allow the passwords for Emerson OpenEnterprise versions through 3.3.4 user accounts to be obtained.
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:NEmerson Openenterprise Scada Server
APPEmerson≤ 3.3.4
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Related vulnerabilities
CVE-2020-10640CRITICAL10.0PL ✓same product
RCE z uprawnieniami systemowymi w Emerson OpenEnterprise SCADA Server
CVE-2020-6970CRITICAL9.8PL ✓same product
Heap-based Buffer Overflow w Emerson OpenEnterprise SCADA Server
CVE-2020-10632HIGH8.8same product
Inadequate folder security permissions in Emerson OpenEnterprise versions through 3.3.4 may allow modification...
CVE-2020-16235LOW3.8same product
Niewystarczająca enkrypcja może umożliwić uzyskanie poświadczeń używanych przez Emerson OpenEnterprise w wersj...
CVE-2023-46687CRITICAL9.8PL ✓same vendor
Emerson Rosemount GC370XA/GC700XA/GC1500XA — zdalne RCE jako root bez uwierzytelnienia