CVE-2013-0694
First published: Thu Oct 03 2013(Updated: )
The Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier have hardcoded credentials in a ROM, which makes it easier for remote attackers to obtain shell access to the underlying OS by leveraging knowledge of the ROM contents from a product installation elsewhere.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| ENEA OSE | <=2.30 | |
| Emerson Dl 8000 Remote Terminal Unit | ||
| ENEA OSE | <=1.20 | |
| Emerson Roc 800l Remote Terminal Unit | ||
| ENEA OSE | <=3.50 | |
| Emerson Roc 800 Remote Terminal Unit |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- agent/event
- agent/description
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/enea
- canonical/enea ose
- version/enea ose/2.30
- vendor/emerson
- canonical/emerson dl 8000 remote terminal unit
- version/enea ose/1.20
- canonical/emerson roc 800l remote terminal unit
- version/enea ose/3.50
- canonical/emerson roc 800 remote terminal unit