CRITICAL🇵🇱 Wersja polska

CVE-2020-6970

CVSS 9.8v3.1pub. 2020-02-19upd. 2024-11-21

A Heap-based Buffer Overflow was found in Emerson OpenEnterprise SCADA Server 2.83 (if Modbus or ROC Interfaces have been installed and are in use) and all versions of OpenEnterprise 3.1 through 3.3.3, where a specially crafted script could execute code on the OpenEnterprise Server.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Emerson Openenterprise Scada Server

    APP
    Emerson
    2.8.33.1 – 3.3.3
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Memory
CWE
References

Related vulnerabilities

CVE-2020-10640CRITICAL10.0PL ✓same product

RCE z uprawnieniami systemowymi w Emerson OpenEnterprise SCADA Server

CVE-2020-10632HIGH8.8same product

Inadequate folder security permissions in Emerson OpenEnterprise versions through 3.3.4 may allow modification...

CVE-2020-10636MEDIUM6.5same product

Inadequate encryption may allow the passwords for Emerson OpenEnterprise versions through 3.3.4 user accounts ...

CVE-2020-16235LOW3.8same product

Niewystarczająca enkrypcja może umożliwić uzyskanie poświadczeń używanych przez Emerson OpenEnterprise w wersj...

CVE-2023-46687CRITICAL9.8PL ✓same vendor

Emerson Rosemount GC370XA/GC700XA/GC1500XA — zdalne RCE jako root bez uwierzytelnienia