CVE-2013-0689: Code Injection
First published: Thu Oct 03 2013(Updated: )
The TFTP server on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to upload files and consequently execute arbitrary code via unspecified vectors.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| ENEA OSE | <=1.20 | |
| Emerson Roc 800l Remote Terminal Unit | ||
| ENEA OSE | <=3.50 | |
| Emerson Roc 800 Remote Terminal Unit | ||
| ENEA OSE | <=2.30 | |
| Emerson Dl 8000 Remote Terminal Unit |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/description
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/enea
- canonical/enea ose
- version/enea ose/1.20
- vendor/emerson
- canonical/emerson roc 800l remote terminal unit
- version/enea ose/3.50
- canonical/emerson roc 800 remote terminal unit
- version/enea ose/2.30
- canonical/emerson dl 8000 remote terminal unit