CVE-2013-0689

2013-10-0311:04:00

CWE-94

[email protected]

web.nvd.nist.gov

emerson

process management

roc800

rtu

tftp server

remote attackers

file upload

code execution

7.8 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

75.1%

JSON

The TFTP server on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to upload files and consequently execute arbitrary code via unspecified vectors.

CPENameOperatorVersion
enea:oseenea osele1.20
emerson:roc_800l_remote_terminal_unitemerson roc 800l remote terminal uniteq-
enea:oseenea osele3.50
emerson:roc_800_remote_terminal_unitemerson roc 800 remote terminal uniteq-
enea:oseenea osele2.30
emerson:dl_8000_remote_terminal_unitemerson dl 8000 remote terminal uniteq-

CPE	Name	Operator	Version
enea:ose	enea ose	le	1.20
emerson:roc_800l_remote_terminal_unit	emerson roc 800l remote terminal unit	eq	-
enea:ose	enea ose	le	3.50
emerson:roc_800_remote_terminal_unit	emerson roc 800 remote terminal unit	eq	-
enea:ose	enea ose	le	2.30
emerson:dl_8000_remote_terminal_unit	emerson dl 8000 remote terminal unit	eq	-