Lucene search
IcscertCVELIST:CVE-2023-49716HistoryFeb 09, 2024 - 3:45 a.m.
CVE-2023-49716 Emerson Rosemount GC370XA, GC700XA, GC1500XA Command Injection
2024-02-0903:45:37
CWE-77
icscert
www.cve.org
emerson
gc370xa
gc700xa
gc1500xa
command injection
vulnerability
authenticated user
network access
remote computer
6.9 Medium
CVSS3
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H
9.6 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
40.3%
In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an authenticated user with network access could run arbitrary commands from a remote computer.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Rosemount GC370XA",
"vendor": "Emerson",
"versions": [
{
"lessThanOrEqual": "Version 4.1.5",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Rosemount GC700XA",
"vendor": "Emerson",
"versions": [
{
"lessThanOrEqual": "Version 4.1.5",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Rosemount GC1500XA",
"vendor": "Emerson",
"versions": [
{
"lessThanOrEqual": "Version 4.1.5",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
]Related
cve
cve
CVE-2023-49716
2024-02-09 04:15:08
prion
prion
Cross site request forgery (csrf)
2024-02-09 04:15:00
nvd
nvd
CVE-2023-49716
2024-02-09 04:15:08
ics
ics
Emerson Rosemount GC370XA, GC700XA, GC1500XA
2024-01-30 12:00:00
thn
thn
Researchers Warn of Flaws in Widely Used Industrial Gas Analysis Equipment
2024-06-28 07:52:00
6.9 Medium
CVSS3
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H
9.6 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
40.3%
Related for CVELIST:CVE-2023-49716