10
CVE-2013-2810
- EPSS 3.02%
- Veröffentlicht 08.12.2014 11:59:00
- Zuletzt bearbeitet 12.04.2025 10:46:40
- Quelle ics-cert@hq.dhs.gov
- CVE-Watchlists
- Unerledigt
LoginEmerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to execute arbitrary commands via a TCP replay attack.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Emerson ≫ Dl 8000 Remote Terminal Unit Firmware Version2.30
Emerson ≫ Dl 8000 Remote Terminal Unit Version-
Emerson ≫ Roc 800l Remote Terminal Unit Firmware Version <= 1.20
Emerson ≫ Roc 800l Remote Terminal Unit Version-
Emerson ≫ Roc 800 Remote Terminal Unit Firmware Version <= 3.50
Emerson ≫ Roc 800 Remote Terminal Unit Version-
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 3.02% | 0.859 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')
The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.