CVE-2023-46687

An unauthenticated user with network access to the device can send a crafted request, which results in execution of arbitrary system commands (command injection) with root privileges. The vulnerability classified as CWE-77 indicates improper neutralization of special characters before passing data to the command interpreter. The attack requires no credentials or user interaction.

The attacker gains full control of the device with root privileges, enabling reading and modification of measurement data, disruption of the technological process, and use of the device as an entry point to the industrial network (lateral movement).

Patches available from the manufacturer should be applied in accordance with the references (Emerson security notice ICSA-24-030-01). Additionally, it is recommended to isolate devices from untrusted networks, restrict network access to these devices exclusively to authorized hosts, and implement firewalls and OT network segmentation in accordance with CISA recommendations.

Emerson Rosemount GC370XA, GC700XA, and GC1500XA — firmware versions indicated in the manufacturer's references (ICSA-24-030-01)