CVE-2023-1935: Critical severity emerson roc809 & roc827 vulnerability

Published Aug 2, 2023
·
Updated

ROC800-Series RTU devices are vulnerable to an authentication bypass, which could allow an attacker to gain unauthorized access to data or control of the device and cause a denial-of-service condition.

Affected Software

13 affected components
: Emerson ROC809 & ROC827— All firmware versions, all hardware series
: Emerson ROC809L & ROC827L— All firmware versions
: Emerson DL8000— All firmware versions, all hardware series
Emerson Roc809 Firmware
Emerson Roc809
Emerson Roc827 Firmware
Emerson Roc827
Emerson Roc809l Firmware
Emerson Roc809l
Emerson Roc827l Firmware
Emerson Roc827l
Emerson Dl8000 Firmware
Emerson Dl8000

Event History

Aug 2, 2023
CVE Published
via MITRE·10:40 PM
Data Sourced
via MITRE·10:40 PM
DescriptionSeverityWeakness
Data Sourced
11:15 PM
DescriptionWeakness

Parent advisories

This vulnerability appears in the following advisories.

Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2023-1935.

2

What is the severity of CVE-2023-1935?

The severity of CVE-2023-1935 is critical with a score of 9.4.

3

Which devices are affected by CVE-2023-1935?

The ROC800-Series RTU devices, specifically Emerson Roc809 Firmware, Emerson Roc827 Firmware, Emerson Roc809l Firmware, and Emerson Roc827l Firmware, are affected by CVE-2023-1935.

4

What is the potential impact of CVE-2023-1935?

CVE-2023-1935 could allow an attacker to gain unauthorized access to data or control of the device and cause a denial-of-service condition.

5

Where can I find more information about CVE-2023-1935?

More information about CVE-2023-1935 can be found at the following reference: [link](https://www.cisa.gov/news-events/ics-advisories/icsa-23-206-03).

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203