CVE-2020-6970: Buffer Overflow
Published Feb 19, 2020
·Updated
A Heap-based Buffer Overflow was found in Emerson OpenEnterprise SCADA Server 2.83 (if Modbus or ROC Interfaces have been installed and are in use) and all versions of OpenEnterprise 3.1 through 3.3.3, where a specially crafted script could execute code on the OpenEnterprise Server.
Affected Software
2 affected components
Emerson OpenEnterprise SCADA Server>=3.1<=3.3.3
Emerson OpenEnterprise SCADA Server=2.8.3
Event History
Feb 19, 2020
CVE Published
via MITRE·08:19 PM
Data Sourced
via MITRE·08:19 PM
DescriptionWeakness
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID is CVE-2020-6970.
2
What is the title of this vulnerability?
The title of this vulnerability is 'A Heap-based Buffer Overflow was found in Emerson OpenEnterprise SCADA Server 2.83'.
3
What is the severity of CVE-2020-6970?
The severity of CVE-2020-6970 is critical.
4
Which software versions are affected by CVE-2020-6970?
Emerson OpenEnterprise SCADA Server versions 2.8.3 and 3.1 through 3.3.3 are affected by CVE-2020-6970.
5
How can this vulnerability be exploited?
This vulnerability can be exploited by using a specially crafted script that could execute code on the OpenEnterprise Server.