CVE-2020-6971

CVE-2020-6971 affects Emerson ValveLink software, specifically ValveLink v12.0.264 to v13.4.118. The issue is improper access control that may allow a local, unprivileged, trusted insider to escalate privileges due to insecure configuration parameters. CVSS v3 base score is 7.8 (LOCAL, LOW PR, HI...

Emerson ValveLink

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Emerson Equipment: ValveLink Vulnerability: Improper Access Control 2. RISK EVALUATION Successful exploitation of this vulnerability could allow arbitrary code execution. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The...