Emerson records

85 published records for vendor emerson.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 13
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

85 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
45Plan	CVE-2021-45427No exploit	Emerson XWEB 300D EVO 3.0.7--3ee403 is affected by: unauthenticated arbitrary file deletion due to path traversal.emerson · xweb300d evo firmware · CWE-22 Pre-auth Path traversal	Critical9.8	—	19.1%	Dec 30, 2021
44Plan	CVE-2021-45420Proof of concept	Emerson Dixell XWEB-500 products are affected by arbitrary file write vulnerability in /cgi-bin/logo_extra_upload.cgi, /cgi-bin/cal_save.cgiemerson · dixell xweb-500 firmware · CWE-200 pre-auth RCE Info leak	Critical9.8	—	17.5%	Feb 14, 2022
42Plan	CVE-2013-2810No exploit	Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with softwaemerson · dl 8000 remote terminal unit firmware · CWE-77 pre-auth RCE Command injection	Critical10.0	—	5.9%	Dec 8, 2014
42Plan	CVE-2013-0689No exploit	The TFTP server on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and emerson · roc 800l remote terminal unit · CWE-94 pre-auth RCE	Critical10.0	—	5.0%	Oct 3, 2013
41Plan	CVE-2013-0692No exploit	The kernel in ENEA OSE on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlieenea · ose · CWE-264 pre-auth RCE	Critical10.0	—	4.8%	Oct 3, 2013
41Plan	CVE-2013-0693No exploit	The kernel in ENEA OSE on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlieenea · ose · CWE-200 Pre-auth Info leak	Critical10.0	—	3.2%	Oct 3, 2013
40Plan	CVE-2016-8348No exploit	An XML External Entity (XXE) issue was discovered in Emerson Liebert SiteScan Web Version 6.5, and prior.emerson · liebert sitescan web · CWE-611 pre-auth RCE XXE	Critical9.8	—	3.5%	Feb 13, 2017
40Plan	CVE-2018-14804No exploit	Emerson AMS Device Manager v12.0 to v13.5.emerson · ams device manager · CWE-284 pre-auth RCE Broken access control (IDOR)	Critical9.8	—	3.5%	Oct 1, 2018
40Plan	CVE-2020-10640No exploit	ICSA-20-140-02 Emerson OpenEnterpriseemerson · openenterprise scada server · CWE-306 pre-auth RCE Auth bypass	Critical9.8	—	3.1%	Feb 24, 2022
40Plan	CVE-2020-6970No exploit	A Heap-based Buffer Overflow was found in Emerson OpenEnterprise SCADA Server 2.83 (if Modbus or ROC Interfaces have been installed and are emerson · openenterprise scada server · CWE-122 Pre-auth Memory safety	Critical9.8	—	2.5%	Feb 19, 2020
40Plan	CVE-2018-11691No exploit	Emerson DeltaV Smart Switch Command Center application, available in versions 11.3.x and 12.3.1, was unable to change the DeltaV Smart Switcemerson · ve6046 firmware · CWE-798 Pre-auth Hard-coded credentials	Critical9.8	—	2.2%	May 14, 2019
40Plan	CVE-2021-27459No exploit	A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer.emerson · x-stream enhanced xegp firmware · CWE-434 pre-auth RCE File upload	Critical9.8	—	1.7%	May 20, 2021
40Plan	CVE-2020-12030No exploit	Emerson WirelessHART Gatewayemerson · wireless 1410 gateway firmware · CWE-284 Pre-auth Broken access control (IDOR)	Critical10.0	—	1.1%	Sep 29, 2021
39Monitor	CVE-2023-46687No exploit	Emerson Rosemount GC370XA, GC700XA, GC1500XA Command Injectionemerson · gc370xa firmware · CWE-77 pre-auth RCE Command injection	Critical9.8	—	0.9%	Feb 9, 2024
39Monitor	CVE-2023-49716No exploit	Emerson Rosemount GC370XA, GC700XA, GC1500XA Command Injectionemerson · gc370xa firmware · CWE-77 pre-auth RCE Command injection	Critical9.8	—	0.5%	Feb 9, 2024
39Monitor	CVE-2022-30264No exploit	The Emerson ROC and FloBoss RTU product lines through 2022-05-02 perform insecure filesystem operations.emerson · dl8000 firmware · CWE-345 Pre-auth	Critical9.8	—	0.5%	Aug 16, 2022
37Monitor	CVE-2013-0694No exploit	The Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with soemerson · dl 8000 remote terminal unit · CWE-255 Hard-coded credentials	Critical9.0	—	2.5%	Oct 3, 2013
37Monitor	CVE-2023-1935No exploit	ROC800-Series RTU devices are vulnerable to an authentication bypass, which could allow an attacker to gain unauthorized access to data or cemerson · roc809 firmware · CWE-287 Pre-auth Auth bypass	Critical9.4	—	0.6%	Aug 2, 2023
36Monitor	CVE-2019-10967No exploit	In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a stack-based buffer overflow vulnerability in the embedded third-party FTP server iemerson · ovation ocr400 firmware · CWE-121 RCE Memory safety	High8.8	—	3.6%	May 28, 2019
36Monitor	CVE-2019-10965No exploit	In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a heap-based buffer overflow vulnerability in the embedded third-party FTP server inemerson · ovation ocr400 firmware · CWE-787 RCE Memory safety	High8.8	—	3.5%	May 28, 2019
36Monitor	CVE-2020-19417No exploit	Emerson Smart Wireless Gateway 1420 4.6.59 allows non-privileged users (such as the default account 'maint') to perform administrative tasksemerson · wireless 1420 gateway firmware	High8.8	—	2.7%	Mar 10, 2021
36Monitor	CVE-2018-14795No exploit	DeltaV Versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 is vulnerable due to improper path validation which may allow an attacker to replace emerson · deltav · CWE-23 Path traversal	High8.8	—	2.1%	Aug 21, 2018
36Monitor	CVE-2023-43609No exploit	Emerson Rosemount GC370XA, GC700XA, GC1500XA Improper Authorizationemerson · gc370xa firmware · CWE-863 Pre-auth Broken access control (IDOR)	Critical9.1	—	0.4%	Feb 9, 2024
35Monitor	CVE-2021-42542No exploit	Emerson WirelessHART Gatewayemerson · wireless 1410 gateway firmware · CWE-22 Path traversal	High8.8	—	1.4%	Oct 22, 2021
35Monitor	CVE-2021-42540No exploit	Emerson WirelessHART Gatewayemerson · wireless 1410 gateway firmware · CWE-123	High8.8	—	1.0%	Oct 22, 2021

CVE-2021-45427
45Plan
Emerson XWEB 300D EVO 3.0.7--3ee403 is affected by: unauthenticated arbitrary file deletion due to path traversal.
CriticalCVSS 9.8No exploitEPSS 19%
- Pre-auth
- Path traversal
emerson · xweb300d evo firmwareDec 30, 2021
CVE-2021-45420
44Plan
Emerson Dixell XWEB-500 products are affected by arbitrary file write vulnerability in /cgi-bin/logo_extra_upload.cgi, /cgi-bin/cal_save.cgi
CriticalCVSS 9.8Proof of conceptEPSS 17%
- pre-auth RCE
- Info leak
emerson · dixell xweb-500 firmwareFeb 14, 2022
CVE-2013-2810
42Plan
Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with softwa
CriticalCVSS 10.0No exploitEPSS 5%
- pre-auth RCE
- Command injection
emerson · dl 8000 remote terminal unit firmwareDec 8, 2014
CVE-2013-0689
42Plan
The TFTP server on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and
CriticalCVSS 10.0No exploitEPSS 5%
- pre-auth RCE
emerson · roc 800l remote terminal unitOct 3, 2013
CVE-2013-0692
41Plan
The kernel in ENEA OSE on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlie
CriticalCVSS 10.0No exploitEPSS 4%
- pre-auth RCE
enea · oseOct 3, 2013
CVE-2013-0693
41Plan
The kernel in ENEA OSE on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlie
CriticalCVSS 10.0No exploitEPSS 3%
- Pre-auth
- Info leak
enea · oseOct 3, 2013
CVE-2016-8348
40Plan
An XML External Entity (XXE) issue was discovered in Emerson Liebert SiteScan Web Version 6.5, and prior.
CriticalCVSS 9.8No exploitEPSS 3%
- pre-auth RCE
- XXE
emerson · liebert sitescan webFeb 13, 2017
CVE-2018-14804
40Plan
Emerson AMS Device Manager v12.0 to v13.5.
CriticalCVSS 9.8No exploitEPSS 3%
- pre-auth RCE
- Broken access control (IDOR)
emerson · ams device managerOct 1, 2018
CVE-2020-10640
40Plan
ICSA-20-140-02 Emerson OpenEnterprise
CriticalCVSS 9.8No exploitEPSS 3%
- pre-auth RCE
- Auth bypass
emerson · openenterprise scada serverFeb 24, 2022
CVE-2020-6970
40Plan
A Heap-based Buffer Overflow was found in Emerson OpenEnterprise SCADA Server 2.83 (if Modbus or ROC Interfaces have been installed and are
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- Memory safety
emerson · openenterprise scada serverFeb 19, 2020
CVE-2018-11691
40Plan
Emerson DeltaV Smart Switch Command Center application, available in versions 11.3.x and 12.3.1, was unable to change the DeltaV Smart Switc
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- Hard-coded credentials
emerson · ve6046 firmwareMay 14, 2019
CVE-2021-27459
40Plan
A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer.
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- File upload
emerson · x-stream enhanced xegp firmwareMay 20, 2021
CVE-2020-12030
40Plan
Emerson WirelessHART Gateway
CriticalCVSS 10.0No exploitEPSS 1%
- Pre-auth
- Broken access control (IDOR)
emerson · wireless 1410 gateway firmwareSep 29, 2021
CVE-2023-46687
39Monitor
Emerson Rosemount GC370XA, GC700XA, GC1500XA Command Injection
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Command injection
emerson · gc370xa firmwareFeb 9, 2024
CVE-2023-49716
39Monitor
Emerson Rosemount GC370XA, GC700XA, GC1500XA Command Injection
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Command injection
emerson · gc370xa firmwareFeb 9, 2024
CVE-2022-30264
39Monitor
The Emerson ROC and FloBoss RTU product lines through 2022-05-02 perform insecure filesystem operations.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
emerson · dl8000 firmwareAug 16, 2022
CVE-2013-0694
37Monitor
The Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with so
CriticalCVSS 9.0No exploitEPSS 2%
- Hard-coded credentials
emerson · dl 8000 remote terminal unitOct 3, 2013
CVE-2023-1935
37Monitor
ROC800-Series RTU devices are vulnerable to an authentication bypass, which could allow an attacker to gain unauthorized access to data or c
CriticalCVSS 9.4No exploitEPSS 0%
- Pre-auth
- Auth bypass
emerson · roc809 firmwareAug 2, 2023
CVE-2019-10967
36Monitor
In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a stack-based buffer overflow vulnerability in the embedded third-party FTP server i
HighCVSS 8.8No exploitEPSS 3%
- RCE
- Memory safety
emerson · ovation ocr400 firmwareMay 28, 2019
CVE-2019-10965
36Monitor
In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a heap-based buffer overflow vulnerability in the embedded third-party FTP server in
HighCVSS 8.8No exploitEPSS 3%
- RCE
- Memory safety
emerson · ovation ocr400 firmwareMay 28, 2019
CVE-2020-19417
36Monitor
Emerson Smart Wireless Gateway 1420 4.6.59 allows non-privileged users (such as the default account 'maint') to perform administrative tasks
HighCVSS 8.8No exploitEPSS 2%
emerson · wireless 1420 gateway firmwareMar 10, 2021
CVE-2018-14795
36Monitor
DeltaV Versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 is vulnerable due to improper path validation which may allow an attacker to replace
HighCVSS 8.8No exploitEPSS 2%
- Path traversal
emerson · deltavAug 21, 2018
CVE-2023-43609
36Monitor
Emerson Rosemount GC370XA, GC700XA, GC1500XA Improper Authorization
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
emerson · gc370xa firmwareFeb 9, 2024
CVE-2021-42542
35Monitor
Emerson WirelessHART Gateway
HighCVSS 8.8No exploitEPSS 1%
- Path traversal
emerson · wireless 1410 gateway firmwareOct 22, 2021
CVE-2021-42540
35Monitor
Emerson WirelessHART Gateway
HighCVSS 8.8No exploitEPSS 1%
emerson · wireless 1410 gateway firmwareOct 22, 2021