CVE-2018-14804

2018-09-2700:00:00

CWE-284

icscert

www.cve.org

9.8 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.1%

JSON

Emerson AMS Device Manager v12.0 to v13.5. A specially crafted script may be run that allows arbitrary remote code execution.

CNA Affected

[
  {
    "product": "AMS Device Manager",
    "vendor": "Emerson",
    "versions": [
      {
        "status": "affected",
        "version": "v12.0 to v13.5"
      }
    ]
  }
]

References

www.securityfocus.com/bid/105406

ics-cert.us-cert.gov/advisories/ICSA-18-270-01