Lucene search

IcscertCVELIST:CVE-2023-43609

HistoryFeb 09, 2024 - 3:52 a.m.

CVE-2023-43609 Emerson Rosemount GC370XA, GC700XA, GC1500XA Improper Authorization

2024-02-0903:52:03

CWE-285

icscert

www.cve.org

cve-2023-43609

improper authorization

emerson rosemount

6.9 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H

9.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.3%

JSON

In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could obtain access to sensitive information or cause a denial-of-service condition.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Rosemount GC370XA",
    "vendor": "Emerson",
    "versions": [
      {
        "lessThanOrEqual": "Version 4.1.5",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Rosemount GC700XA",
    "vendor": "Emerson",
    "versions": [
      {
        "lessThanOrEqual": "Version 4.1.5",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Rosemount GC1500XA",
    "vendor": "Emerson",
    "versions": [
      {
        "lessThanOrEqual": "Version 4.1.5",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.cisa.gov/news-events/ics-advisories/icsa-24-030-01

www.emerson.com/documents/automation/security-notification-emerson-gas-chromatographs-cyber-security-notification-icsa-24-030-01-en-10103910.pdf

6.9 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H

9.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.3%

JSON

Related for CVELIST:CVE-2023-43609