CVE-2020-10640

Emerson OpenEnterprise versions through 3.3.4 may allow an attacker to run an arbitrary commands with system privileges or perform remote code execution via a specific communication service...

Remote code execution

Emerson OpenEnterprise versions through 3.3.4 may allow an attacker to run an arbitrary commands with system privileges or perform remote code execution via a specific communication service...

CVE-2020-10636 ICSA-20-140-02 Emerson OpenEnterprise

Inadequate encryption may allow the passwords for Emerson OpenEnterprise versions through 3.3.4 user accounts to be obtained...

CVE-2020-10636 ICSA-20-140-02 Emerson OpenEnterprise

Inadequate encryption may allow the passwords for Emerson OpenEnterprise versions through 3.3.4 user accounts to be obtained...

CVE-2020-10636

The vulnerability CVE-2020-10636 affects Emerson OpenEnterprise (SCADA) up to version 3.3.4. The issue is inadequate encryption that may allow passwords for OpenEnterprise user accounts to be obtained. Red Hat and NVD entries corroborate the same description of password exposure; CISA ICS advisor...

CVE-2020-10640

CVE-2020-10640 affects Emerson OpenEnterprise up to version 3.3.4. The vulnerability (Missing Authentication for Critical Function) could allow an attacker to run arbitrary commands with system privileges or perform remote code execution via a specific communication service. A patch is available:...

CVE-2020-10640 ICSA-20-140-02 Emerson OpenEnterprise

Emerson OpenEnterprise versions through 3.3.4 may allow an attacker to run an arbitrary commands with system privileges or perform remote code execution via a specific communication service...

CVE-2020-10640 ICSA-20-140-02 Emerson OpenEnterprise

Emerson OpenEnterprise versions through 3.3.4 may allow an attacker to run an arbitrary commands with system privileges or perform remote code execution via a specific communication service...

CVE-2020-10632 ICSA-20-140-02 Emerson OpenEnterprise

Inadequate folder security permissions in Emerson OpenEnterprise versions through 3.3.4 may allow modification of important configuration files, which could cause the system to fail or behave in an unpredictable manner...

CVE-2020-10632 ICSA-20-140-02 Emerson OpenEnterprise

Inadequate folder security permissions in Emerson OpenEnterprise versions through 3.3.4 may allow modification of important configuration files, which could cause the system to fail or behave in an unpredictable manner...

CVE-2020-10632

The CVE-2020-10632 entry concerns Emerson OpenEnterprise up to version 3.3.4, where inadequate folder security permissions could allow modification of important configuration files, potentially causing system failure or unpredictable behavior. Connected sources (Red Hat, CISA ICS, CVE records) co...

Emerson OpenEnterprise

1. EXECUTIVE SUMMARY CVSS v3 3,8 ATTENTION: Low skill level to exploit Vendor: Emerson Equipment: OpenEnterprise SCADA Software Vulnerability: Inadequate Encryption Strength 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker access to credentials held by...

The vulnerability of the SCADA platform for remote oil and gas applications from Emerson’s OpenEnterprise platform stems from improper implementation of authentication mechanisms. This allows attackers to execute arbitrary code.

The vulnerability of the SCADA platform for remote Emerson OpenEnterprise oil and gas applications is related to the improper implementation of authentication mechanisms. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted malicious...

The vulnerability of the SCADA platform for remote oil and gas applications from Emerson’s OpenEnterprise, related to the improper implementation of authentication mechanisms, allows attackers to trigger a service failure.

The vulnerability of the SCADA platform for remote oil and gas applications from Emerson’s OpenEnterprise platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Emerson Electric OpenEnterprise Encryption Issues Vulnerabilities

Emerson Electric OpenEnterprise is a data acquisition and monitoring system SCADA from Emerson Electric, primarily for remote oil and gas applications. A vulnerability exists in Emerson Electric OpenEnterprise 3.3.4 and prior versions due to an encryption issue. An attacker could exploit the...

Emerson OpenEnterprise Critical Function Authentication Missing Vulnerability

Emerson Electric OpenEnterprise is a data acquisition and monitoring system SCADA from Emerson Electric, primarily for remote oil and gas applications. A security vulnerability exists in Emerson Electric OpenEnterprise 3.3.4 and prior versions. The vulnerability can be exploited by an attacker to...

Emerson OpenEnterprise Rights Mismanagement Vulnerability

Emerson Electric OpenEnterprise is a data acquisition and monitoring system SCADA from Emerson Electric, primarily for remote oil and gas applications. A security vulnerability exists in Emerson Electric OpenEnterprise 3.3.4 and prior versions, which arises from the program setting insecure...

Emerson OpenEnterprise

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Emerson Equipment: OpenEnterprise SCADA Software Vulnerabilities: Missing Authentication for Critical Function, Improper Ownership Management, Inadequate Encryption Strength 2. RISK EVALUATION...

CVE-2020-6970

A Heap-based Buffer Overflow was found in Emerson OpenEnterprise SCADA Server 2.83 if Modbus or ROC Interfaces have been installed and are in use and all versions of OpenEnterprise 3.1 through 3.3.3, where a specially crafted script could execute code on the OpenEnterprise Server...

CVE-2020-6970

A Heap-based Buffer Overflow was found in Emerson OpenEnterprise SCADA Server 2.83 if Modbus or ROC Interfaces have been installed and are in use and all versions of OpenEnterprise 3.1 through 3.3.3, where a specially crafted script could execute code on the OpenEnterprise Server...