Heap overflow

2020-02-1921:15:00

PRIOn knowledge base

www.prio-n.com

9.6 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.3%

JSON

A Heap-based Buffer Overflow was found in Emerson OpenEnterprise SCADA Server 2.83 (if Modbus or ROC Interfaces have been installed and are in use) and all versions of OpenEnterprise 3.1 through 3.3.3, where a specially crafted script could execute code on the OpenEnterprise Server.

CPENameOperatorVersion
openenterprise_scada_serverge3.1
openenterprise_scada_serverle3.3.3
openenterprise_scada_servereq2.8.3

Name	Operator	Version
openenterprise_scada_server	ge	3.1
openenterprise_scada_server	le	3.3.3
openenterprise_scada_server	eq	2.8.3

References

www.us-cert.gov/ics/advisories/icsa-20-049-02