Emerson kayıtları

emerson üreticisine ait 85 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 13
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

85 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
45Planlayın	CVE-2021-45427İstismar yok	Emerson XWEB 300D EVO 3.0.7--3ee403 is affected by: unauthenticated arbitrary file deletion due to path traversal.emerson · xweb300d evo firmware · CWE-22 Kimlik doğrulamasız Yol geçişi	Kritik9,8	—	%19,2	30 Ara 2021
44Planlayın	CVE-2021-45420Kavram kanıtı	Emerson Dixell XWEB-500 products are affected by arbitrary file write vulnerability in /cgi-bin/logo_extra_upload.cgi, /cgi-bin/cal_save.cgiemerson · dixell xweb-500 firmware · CWE-200 pre-auth RCE Bilgi sızıntısı	Kritik9,8	—	%17,6	14 Şub 2022
42Planlayın	CVE-2013-2810İstismar yok	Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with softwaemerson · dl 8000 remote terminal unit firmware · CWE-77 pre-auth RCE Komut enjeksiyonu	Kritik10,0	—	%6,0	8 Ara 2014
42Planlayın	CVE-2013-0689İstismar yok	The TFTP server on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and emerson · roc 800l remote terminal unit · CWE-94 pre-auth RCE	Kritik10,0	—	%5,0	3 Eki 2013
41Planlayın	CVE-2013-0692İstismar yok	The kernel in ENEA OSE on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlieenea · ose · CWE-264 pre-auth RCE	Kritik10,0	—	%4,9	3 Eki 2013
41Planlayın	CVE-2013-0693İstismar yok	The kernel in ENEA OSE on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlieenea · ose · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Kritik10,0	—	%3,3	3 Eki 2013
40Planlayın	CVE-2016-8348İstismar yok	An XML External Entity (XXE) issue was discovered in Emerson Liebert SiteScan Web Version 6.5, and prior.emerson · liebert sitescan web · CWE-611 pre-auth RCE XXE	Kritik9,8	—	%3,5	13 Şub 2017
40Planlayın	CVE-2018-14804İstismar yok	Emerson AMS Device Manager v12.0 to v13.5.emerson · ams device manager · CWE-284 pre-auth RCE Erişim denetimi (IDOR)	Kritik9,8	—	%3,5	1 Eki 2018
40Planlayın	CVE-2020-10640İstismar yok	ICSA-20-140-02 Emerson OpenEnterpriseemerson · openenterprise scada server · CWE-306 pre-auth RCE Kimlik doğrulama atlatma	Kritik9,8	—	%3,1	24 Şub 2022
40Planlayın	CVE-2020-6970İstismar yok	A Heap-based Buffer Overflow was found in Emerson OpenEnterprise SCADA Server 2.83 (if Modbus or ROC Interfaces have been installed and are emerson · openenterprise scada server · CWE-122 Kimlik doğrulamasız Bellek hatası	Kritik9,8	—	%2,6	19 Şub 2020
40Planlayın	CVE-2018-11691İstismar yok	Emerson DeltaV Smart Switch Command Center application, available in versions 11.3.x and 12.3.1, was unable to change the DeltaV Smart Switcemerson · ve6046 firmware · CWE-798 Kimlik doğrulamasız Gömülü kimlik bilgisi	Kritik9,8	—	%2,3	14 May 2019
40Planlayın	CVE-2021-27459İstismar yok	A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer.emerson · x-stream enhanced xegp firmware · CWE-434 pre-auth RCE Dosya yükleme	Kritik9,8	—	%1,8	20 May 2021
40Planlayın	CVE-2020-12030İstismar yok	Emerson WirelessHART Gatewayemerson · wireless 1410 gateway firmware · CWE-284 Kimlik doğrulamasız Erişim denetimi (IDOR)	Kritik10,0	—	%1,1	29 Eyl 2021
39İzleyin	CVE-2023-46687İstismar yok	Emerson Rosemount GC370XA, GC700XA, GC1500XA Command Injectionemerson · gc370xa firmware · CWE-77 pre-auth RCE Komut enjeksiyonu	Kritik9,8	—	%0,9	9 Şub 2024
39İzleyin	CVE-2023-49716İstismar yok	Emerson Rosemount GC370XA, GC700XA, GC1500XA Command Injectionemerson · gc370xa firmware · CWE-77 pre-auth RCE Komut enjeksiyonu	Kritik9,8	—	%0,6	9 Şub 2024
39İzleyin	CVE-2022-30264İstismar yok	The Emerson ROC and FloBoss RTU product lines through 2022-05-02 perform insecure filesystem operations.emerson · dl8000 firmware · CWE-345 Kimlik doğrulamasız	Kritik9,8	—	%0,5	16 Ağu 2022
37İzleyin	CVE-2013-0694İstismar yok	The Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with soemerson · dl 8000 remote terminal unit · CWE-255 Gömülü kimlik bilgisi	Kritik9,0	—	%2,6	3 Eki 2013
37İzleyin	CVE-2023-1935İstismar yok	ROC800-Series RTU devices are vulnerable to an authentication bypass, which could allow an attacker to gain unauthorized access to data or cemerson · roc809 firmware · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,4	—	%0,7	2 Ağu 2023
36İzleyin	CVE-2019-10967İstismar yok	In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a stack-based buffer overflow vulnerability in the embedded third-party FTP server iemerson · ovation ocr400 firmware · CWE-121 RCE Bellek hatası	Yüksek8,8	—	%3,7	28 May 2019
36İzleyin	CVE-2019-10965İstismar yok	In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a heap-based buffer overflow vulnerability in the embedded third-party FTP server inemerson · ovation ocr400 firmware · CWE-787 RCE Bellek hatası	Yüksek8,8	—	%3,6	28 May 2019
36İzleyin	CVE-2020-19417İstismar yok	Emerson Smart Wireless Gateway 1420 4.6.59 allows non-privileged users (such as the default account 'maint') to perform administrative tasksemerson · wireless 1420 gateway firmware	Yüksek8,8	—	%2,7	10 Mar 2021
36İzleyin	CVE-2018-14795İstismar yok	DeltaV Versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 is vulnerable due to improper path validation which may allow an attacker to replace emerson · deltav · CWE-23 Yol geçişi	Yüksek8,8	—	%2,2	21 Ağu 2018
36İzleyin	CVE-2023-43609İstismar yok	Emerson Rosemount GC370XA, GC700XA, GC1500XA Improper Authorizationemerson · gc370xa firmware · CWE-863 Kimlik doğrulamasız Erişim denetimi (IDOR)	Kritik9,1	—	%0,5	9 Şub 2024
35İzleyin	CVE-2021-42542İstismar yok	Emerson WirelessHART Gatewayemerson · wireless 1410 gateway firmware · CWE-22 Yol geçişi	Yüksek8,8	—	%1,5	22 Eki 2021
35İzleyin	CVE-2021-42540İstismar yok	Emerson WirelessHART Gatewayemerson · wireless 1410 gateway firmware · CWE-123	Yüksek8,8	—	%1,0	22 Eki 2021

CVE-2021-45427
45Planlayın
Emerson XWEB 300D EVO 3.0.7--3ee403 is affected by: unauthenticated arbitrary file deletion due to path traversal.
KritikCVSS 9,8İstismar yokEPSS %19
- Kimlik doğrulamasız
- Yol geçişi
emerson · xweb300d evo firmware30 Ara 2021
CVE-2021-45420
44Planlayın
Emerson Dixell XWEB-500 products are affected by arbitrary file write vulnerability in /cgi-bin/logo_extra_upload.cgi, /cgi-bin/cal_save.cgi
KritikCVSS 9,8Kavram kanıtıEPSS %18
- pre-auth RCE
- Bilgi sızıntısı
emerson · dixell xweb-500 firmware14 Şub 2022
CVE-2013-2810
42Planlayın
Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with softwa
KritikCVSS 10,0İstismar yokEPSS %6
- pre-auth RCE
- Komut enjeksiyonu
emerson · dl 8000 remote terminal unit firmware8 Ara 2014
CVE-2013-0689
42Planlayın
The TFTP server on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and
KritikCVSS 10,0İstismar yokEPSS %5
- pre-auth RCE
emerson · roc 800l remote terminal unit3 Eki 2013
CVE-2013-0692
41Planlayın
The kernel in ENEA OSE on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlie
KritikCVSS 10,0İstismar yokEPSS %5
- pre-auth RCE
enea · ose3 Eki 2013
CVE-2013-0693
41Planlayın
The kernel in ENEA OSE on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlie
KritikCVSS 10,0İstismar yokEPSS %3
- Kimlik doğrulamasız
- Bilgi sızıntısı
enea · ose3 Eki 2013
CVE-2016-8348
40Planlayın
An XML External Entity (XXE) issue was discovered in Emerson Liebert SiteScan Web Version 6.5, and prior.
KritikCVSS 9,8İstismar yokEPSS %4
- pre-auth RCE
- XXE
emerson · liebert sitescan web13 Şub 2017
CVE-2018-14804
40Planlayın
Emerson AMS Device Manager v12.0 to v13.5.
KritikCVSS 9,8İstismar yokEPSS %4
- pre-auth RCE
- Erişim denetimi (IDOR)
emerson · ams device manager1 Eki 2018
CVE-2020-10640
40Planlayın
ICSA-20-140-02 Emerson OpenEnterprise
KritikCVSS 9,8İstismar yokEPSS %3
- pre-auth RCE
- Kimlik doğrulama atlatma
emerson · openenterprise scada server24 Şub 2022
CVE-2020-6970
40Planlayın
A Heap-based Buffer Overflow was found in Emerson OpenEnterprise SCADA Server 2.83 (if Modbus or ROC Interfaces have been installed and are
KritikCVSS 9,8İstismar yokEPSS %3
- Kimlik doğrulamasız
- Bellek hatası
emerson · openenterprise scada server19 Şub 2020
CVE-2018-11691
40Planlayın
Emerson DeltaV Smart Switch Command Center application, available in versions 11.3.x and 12.3.1, was unable to change the DeltaV Smart Switc
KritikCVSS 9,8İstismar yokEPSS %2
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
emerson · ve6046 firmware14 May 2019
CVE-2021-27459
40Planlayın
A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer.
KritikCVSS 9,8İstismar yokEPSS %2
- pre-auth RCE
- Dosya yükleme
emerson · x-stream enhanced xegp firmware20 May 2021
CVE-2020-12030
40Planlayın
Emerson WirelessHART Gateway
KritikCVSS 10,0İstismar yokEPSS %1
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
emerson · wireless 1410 gateway firmware29 Eyl 2021
CVE-2023-46687
39İzleyin
Emerson Rosemount GC370XA, GC700XA, GC1500XA Command Injection
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
- Komut enjeksiyonu
emerson · gc370xa firmware9 Şub 2024
CVE-2023-49716
39İzleyin
Emerson Rosemount GC370XA, GC700XA, GC1500XA Command Injection
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
- Komut enjeksiyonu
emerson · gc370xa firmware9 Şub 2024
CVE-2022-30264
39İzleyin
The Emerson ROC and FloBoss RTU product lines through 2022-05-02 perform insecure filesystem operations.
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
emerson · dl8000 firmware16 Ağu 2022
CVE-2013-0694
37İzleyin
The Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with so
KritikCVSS 9,0İstismar yokEPSS %3
- Gömülü kimlik bilgisi
emerson · dl 8000 remote terminal unit3 Eki 2013
CVE-2023-1935
37İzleyin
ROC800-Series RTU devices are vulnerable to an authentication bypass, which could allow an attacker to gain unauthorized access to data or c
KritikCVSS 9,4İstismar yokEPSS %1
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
emerson · roc809 firmware2 Ağu 2023
CVE-2019-10967
36İzleyin
In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a stack-based buffer overflow vulnerability in the embedded third-party FTP server i
YüksekCVSS 8,8İstismar yokEPSS %4
- RCE
- Bellek hatası
emerson · ovation ocr400 firmware28 May 2019
CVE-2019-10965
36İzleyin
In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a heap-based buffer overflow vulnerability in the embedded third-party FTP server in
YüksekCVSS 8,8İstismar yokEPSS %4
- RCE
- Bellek hatası
emerson · ovation ocr400 firmware28 May 2019
CVE-2020-19417
36İzleyin
Emerson Smart Wireless Gateway 1420 4.6.59 allows non-privileged users (such as the default account 'maint') to perform administrative tasks
YüksekCVSS 8,8İstismar yokEPSS %3
emerson · wireless 1420 gateway firmware10 Mar 2021
CVE-2018-14795
36İzleyin
DeltaV Versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 is vulnerable due to improper path validation which may allow an attacker to replace
YüksekCVSS 8,8İstismar yokEPSS %2
- Yol geçişi
emerson · deltav21 Ağu 2018
CVE-2023-43609
36İzleyin
Emerson Rosemount GC370XA, GC700XA, GC1500XA Improper Authorization
KritikCVSS 9,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
emerson · gc370xa firmware9 Şub 2024
CVE-2021-42542
35İzleyin
Emerson WirelessHART Gateway
YüksekCVSS 8,8İstismar yokEPSS %1
- Yol geçişi
emerson · wireless 1410 gateway firmware22 Eki 2021
CVE-2021-42540
35İzleyin
Emerson WirelessHART Gateway
YüksekCVSS 8,8İstismar yokEPSS %1
emerson · wireless 1410 gateway firmware22 Eki 2021