Lucene search

[email protected]NVD:CVE-2023-43609

HistoryFeb 09, 2024 - 4:15 a.m.

CVE-2023-43609

2024-02-0904:15:07

CWE-285

[email protected]

web.nvd.nist.gov

emerson rosemount products

unauthenticated access

sensitive information

denial of service

network access

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

AI Score

Confidence

High

EPSS

0.001

Percentile

37.2%

JSON

In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could obtain access to sensitive information or cause a denial-of-service condition.

Affected configurations

Nvd

Node

emersongc370xaMatch-

AND

emersongc370xa_firmwareMatch4.1.5

Node

emersongc700xaMatch-

AND

emersongc700xa_firmwareMatch4.1.5

Node

emersongc1500xaMatch-

AND

emersongc1500xa_firmwareMatch4.1.5

VendorProductVersionCPE
emersongc370xa-cpe:2.3:h:emerson:gc370xa:-:*:*:*:*:*:*:*
emersongc370xa_firmware4.1.5cpe:2.3:o:emerson:gc370xa_firmware:4.1.5:*:*:*:*:*:*:*
emersongc700xa-cpe:2.3:h:emerson:gc700xa:-:*:*:*:*:*:*:*
emersongc700xa_firmware4.1.5cpe:2.3:o:emerson:gc700xa_firmware:4.1.5:*:*:*:*:*:*:*
emersongc1500xa-cpe:2.3:h:emerson:gc1500xa:-:*:*:*:*:*:*:*
emersongc1500xa_firmware4.1.5cpe:2.3:o:emerson:gc1500xa_firmware:4.1.5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
emerson	gc370xa	-	cpe:2.3:h:emerson:gc370xa:-:::::::*
emerson	gc370xa_firmware	4.1.5	cpe:2.3:o:emerson:gc370xa_firmware:4.1.5:::::::*
emerson	gc700xa	-	cpe:2.3:h:emerson:gc700xa:-:::::::*
emerson	gc700xa_firmware	4.1.5	cpe:2.3:o:emerson:gc700xa_firmware:4.1.5:::::::*
emerson	gc1500xa	-	cpe:2.3:h:emerson:gc1500xa:-:::::::*
emerson	gc1500xa_firmware	4.1.5	cpe:2.3:o:emerson:gc1500xa_firmware:4.1.5:::::::*