CVE-2020-16235: Emerson OpenEnterprise - Inadequate Encryption Strength
Inadequate encryption may allow the credentials used by Emerson OpenEnterprise, up through version 3.3.5, to access field devices and external systems to be obtained.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-16235?
CVE-2020-16235 is a vulnerability in Emerson OpenEnterprise up to version 3.3.5 that allows unauthorized access to field devices and external systems by obtaining credentials through inadequate encryption.
How does CVE-2020-16235 affect Emerson OpenEnterprise?
CVE-2020-16235 affects Emerson OpenEnterprise up to version 3.3.5 by allowing unauthorized access to field devices and external systems.
What is the severity of CVE-2020-16235?
CVE-2020-16235 has a severity rating of medium with a CVSS score of 6.5.
How can I fix CVE-2020-16235?
To fix CVE-2020-16235, it is recommended to update Emerson OpenEnterprise to a version beyond 3.3.5 that addresses the inadequate encryption vulnerability.
Where can I find more information about CVE-2020-16235?
More information about CVE-2020-16235 can be found in the advisory published by the US Computer Emergency Readiness Team (US-CERT) at https://www.cisa.gov/uscert/ics/advisories/icsa-20-238-02.