CVE-2019-13524

🗓️ 16 Jan 2020 17:53:12Reported by icscertType

GE PACSystems RX3i CPE100/115, CPE302/305/310/330/400/410, CRU/320 prior to R9.85, R9.90, All versions(End of Life). Denial-of-service vulnerability allows attacker to change module state to halt-mode requiring manual recovery

Reporter	Title	Published	Views	Family All 10
CNVD	GE PACSystems Input Validation Error Vulnerability	15 Jan 202000:00	–	cnvd
Cvelist	CVE-2019-13524	16 Jan 202017:53	–	cvelist
EUVD	EUVD-2019-4979	7 Oct 202500:30	–	euvd
ICS	GE PACSystems RX3i	14 Jan 202000:00	–	ics
NVD	CVE-2019-13524	16 Jan 202018:15	–	nvd
OSV	CVE-2019-13524	16 Jan 202018:15	–	osv
Tenable Nessus	Emerson Rx3i Improper Input Validation	10 Aug 202100:00	–	nessus
Tenable Nessus	GE PACSystems RX3i Improper Input Validation (CVE-2019-13524)	7 Feb 202200:00	–	nessus
Prion	Design/Logic Flaw	16 Jan 202018:15	–	prion
RedhatCVE	CVE-2019-13524	22 May 202504:27	–	redhatcve

NVD

Vulners

Node

emerson rx3i_cpe100_firmwareRange<r9.85

AND

emerson rx3i_cpe100Match-

Node

emerson rx3i_cpe115_firmwareRange<r9.85

AND

emerson rx3i_cpe115Match-

Node

emerson rx3i_cpe302_firmwareRange<r9.90

AND

emerson rx3i_cpe302Match-

Node

emerson rx3i_cpe305_firmwareRange<r9.90

AND

emerson rx3i_cpe305Match-

Node

emerson rx3i_cpe310_firmwareRange<r9.90

AND

emerson rx3i_cpe310Match-

Node

emerson rx3i_cru320_firmware

AND

emerson rx3i_cru320Match-

Node

emerson rx3i_cpe330_firmwareRange<r9.90

AND

emerson rx3i_cpe330Match-

Node

emerson rx3i_cpe400_firmwareRange<r9.90

AND

emerson rx3i_cpe400Match-

Node

emerson rx3i_cpl410_firmwareRange<r9.90

AND

emerson rx3i_cpl410Match-

[
  {
    "product": "GE PACSystems RX3i",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "CPE100/115: All versions prior to R9.85,CPE302/305/310/330/400/410: All versions prior to R9.90,CRU320 All versions(End of Life)"
      }
    ]
  }
]

Source	Link
us-cert	www.us-cert.gov/ics/advisories/icsa-20-014-01

21 Nov 2024 04:25Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.5

CVSS 27.8

EPSS0.00404

CWE-20

ge pacsystems rx3i cpe100 cpe115 cpe302 cpe305 cpe310 cpe330 cpe400 cpe410 cru320 vulnerability denial of service nvd cve-2019-13524