CVE-2018-14804

Affected product: Emerson AMS Device Manager (versions 12.0–13.5). Vulnerability CVE-2018-14804 allows arbitrary remote code execution via a specially crafted script due to improper access control. Impact: potential remote code execution with high severity (ICS context). Mitigation: apply patches...

Emerson AMS Device Manager

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Emerson Equipment: AMS Device Manager Vulnerabilities: Improper Access Control, Improper Privilege Management 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow...