Lucene search

K
nessusThis script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.OT_500255.NASL
HistoryNov 08, 2019 - 12:00 a.m.

Enea Ose Improper Control of Generation of Code ('Code Injection')

2019-11-0800:00:00
This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
10

0.004 Low

EPSS

Percentile

75.2%

The TFTP server on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to upload files and consequently execute arbitrary code via unspecified vectors.

File data ot_500255.nasl
VendorProductVersionCPE
eneaose*cpe:2.3:o:enea:ose:*:*:*:*:*:*:*:*
emersonroc_800l_remote_terminal_unit-cpe:2.3:h:emerson:roc_800l_remote_terminal_unit:-:*:*:*:*:*:*:*
eneaose*cpe:2.3:o:enea:ose:*:*:*:*:*:*:*:*
emersonroc_800_remote_terminal_unit-cpe:2.3:h:emerson:roc_800_remote_terminal_unit:-:*:*:*:*:*:*:*
eneaose*cpe:2.3:o:enea:ose:*:*:*:*:*:*:*:*
emersondl_8000_remote_terminal_unit-cpe:2.3:h:emerson:dl_8000_remote_terminal_unit:-:*:*:*:*:*:*:*

0.004 Low

EPSS

Percentile

75.2%

Related for OT_500255.NASL