EUVD-2013-0703

Malware in sbrugna...

EUVD-2013-0705

Malware in sbrugna...

EUVD-2013-2749

Malware in sbrugna...

Emerson DL Command Injection (CVE-2013-2810)

Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to execute arbitrary commands via a TCP replay attack. This plugin only works with Tenable.ot. Please visit...

Emerson OSE Exposure of Sensitive Information to an Unauthorized Actor (CVE-2013-0693)

The kernel in ENEA OSE on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier performs network-beacon broadcasts, which allows remote attackers to obtain potentially sensitive informati...

Code injection

Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to execute arbitrary commands via a TCP replay attack...

CVE-2013-2810

Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to execute arbitrary commands via a TCP replay attack...

PT-2014-2633

Name of the Vulnerable Software and Affected Versions Emerson Process Management ROC800 RTU versions 3.50 and earlier Emerson Process Management DL8000 RTU versions 2.30 and earlier Emerson Process Management ROC800L RTU versions 1.20 and earlier Description The issue allows remote attackers to...

CVE-2013-2810: Improper Neutralization of Special Elements used in a Command

Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to execute arbitrary commands via a TCP replay attack...

CVE-2013-0693

The kernel in ENEA OSE on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier performs network-beacon broadcasts, which allows remote attackers to obtain potentially sensitive informati...

CVE-2013-0689

The TFTP server on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to upload files and consequently execute arbitrary code via unspecified vectors...

CVE-2013-0692

CVE-2013-0692 affects Emerson ROC800 RTUs running ENEA OSE (ROC800, ROC800L, DL8000) with affected software revisions (ROC800 3.50 or earlier, DL8000 2.30 or earlier, ROC800L 1.20 or earlier). The vulnerability allows remote code execution by connecting to the device’s debug service via the ENEA ...

PT-2013-2536

Name of the Vulnerable Software and Affected Versions Emerson Process Management ROC800 RTU versions 3.50 and earlier Emerson Process Management DL8000 RTU versions 2.30 and earlier Emerson Process Management ROC800L RTU versions 1.20 and earlier Description The issue allows remote attackers to...

PT-2013-2535

Name of the Vulnerable Software and Affected Versions Emerson Process Management ROC800 RTU versions 3.50 and earlier Emerson Process Management DL8000 RTU versions 2.30 and earlier Emerson Process Management ROC800L RTU versions 1.20 and earlier Description The issue allows remote attackers to...

PT-2013-2534

Name of the Vulnerable Software and Affected Versions Emerson Process Management ROC800 RTU versions 3.50 and earlier Emerson Process Management DL8000 RTU versions 2.30 and earlier Emerson Process Management ROC800L RTU versions 1.20 and earlier Description The issue allows remote attackers to...

PT-2013-2537

Name of the Vulnerable Software and Affected Versions Emerson Process Management ROC800 RTU versions 3.50 and earlier Emerson Process Management DL8000 RTU versions 2.30 and earlier Emerson Process Management ROC800L RTU versions 1.20 and earlier Description The issue allows remote attackers to...

CVE-2013-0692: Undefined Security Weakness

The kernel in ENEA OSE on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to execute arbitrary code by connecting to the debug service...

CVE-2013-0694: Undefined Security Weakness

The Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier have hardcoded credentials in a ROM, which makes it easier for remote attackers to obtain shell access to the underlying OS by...

CVE-2013-0693: Exposure of Sensitive Information to an Unauthorized Actor

The kernel in ENEA OSE on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier performs network-beacon broadcasts, which allows remote attackers to obtain potentially sensitive informati...

CVE-2013-0689: Improper Control of Generation of Code

The TFTP server on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to upload files and consequently execute arbitrary code via unspecified vectors...