CVE-2020-10636: ICSA-20-140-02 Emerson OpenEnterprise
Published Feb 24, 2022
·Updated
Inadequate encryption may allow the passwords for Emerson OpenEnterprise versions through 3.3.4 user accounts to be obtained.
Affected Software
2 affected components
Emerson OpenEnterprise SCADA Server<=3.3.4
Emerson OpenEnterprise: all versions through 3.3.4
Remediation
Information
Emerson recommends all users upgrade to OpenEnterprise 3.3, Service Pack 5 (3.3.5), to resolve these issues. OpenEnterprise Service Packs are available to users with access to the Emerson SupportNet system (login required). Details will be found in the downloads area.
Please send any questions via a SupportNet ticket or by contacting Emerson at US 800-537-9313. For users outside of the United States, please use international toll-free numbers.
Event History
Feb 24, 2022
CVE Published
via MITRE·06:50 PM
Data Sourced
via MITRE·06:50 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2020-10636?
CVE-2020-10636 is a vulnerability that allows the passwords for Emerson OpenEnterprise versions through 3.3.4 user accounts to be obtained.
2
How severe is CVE-2020-10636?
CVE-2020-10636 has a severity score of 7.5, which is considered high.
3
Which software versions are affected by CVE-2020-10636?
Emerson OpenEnterprise SCADA Server versions up to 3.3.4 are affected by CVE-2020-10636.
4
How can I fix the vulnerability in Emerson OpenEnterprise?
To fix the vulnerability in Emerson OpenEnterprise, you should apply the necessary security updates or patches provided by Emerson.
5
Where can I find more information about CVE-2020-10636?
You can find more information about CVE-2020-10636 on the CISA (Cybersecurity and Infrastructure Security Agency) website.