CVE-2013-0689: Code Injection
The TFTP server on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to upload files and consequently execute arbitrary code via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0689?
CVE-2013-0689 is considered to have a critical severity due to its potential for remote code execution.
How do I fix CVE-2013-0689?
To fix CVE-2013-0689, update the affected Emerson Process Management ROC800 RTU, DL8000 RTU, or ROC800L RTU to the latest software version that mitigates this vulnerability.
Which devices are affected by CVE-2013-0689?
CVE-2013-0689 affects the Emerson Process Management ROC800 RTU with software version 3.50 and earlier, DL8000 RTU with version 2.30 and earlier, and ROC800L RTU with version 1.20 and earlier.
What attack vector is exploited in CVE-2013-0689?
CVE-2013-0689 allows attackers to exploit the TFTP server to upload arbitrary files, leading to remote code execution.
Is CVE-2013-0689 being actively exploited?
While CVE-2013-0689 was disclosed in 2013, it is essential to monitor for any reports of active exploitation as vulnerabilities can be targeted after disclosure.