What is the severity of CVE-2023-46687?

CVE-2023-46687 is rated as critical because it allows unauthenticated remote command execution on affected Emerson products.

How do I fix CVE-2023-46687?

To mitigate CVE-2023-46687, users should update the affected Emerson Rosemount GC370XA, GC700XA, and GC1500XA products to the latest firmware version.

Can CVE-2023-46687 be exploited remotely?

Yes, CVE-2023-46687 can be exploited remotely by an unauthenticated user with network access.

What type of vulnerability is CVE-2023-46687?

CVE-2023-46687 is a remote command execution vulnerability that can lead to unauthorized access and control over the affected devices.

Vulnerability/
CVE-2023-46687

critical

9.8

CWE

9/2/2024

2/8/2024

CVE-2023-46687: Emerson Rosemount GC370XA, GC700XA, GC1500XA Command Injection

First published: Fri Feb 09 2024(Updated: )

In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could execute arbitrary commands in root context from a remote computer.

Credit: ics-cert@hq.dhs.gov

Affected Software	Affected Version	How to fix
All of
Emerson Gc370xa Firmware	=4.1.5
Emerson Gc370xa
All of
Emerson GC700XA	=4.1.5
Emerson GC700XA
All of
Emerson Gc1500xa Firmware	=4.1.5
Emerson GC1500XA

Remedy

Emerson recommends end users update the affected products' firmware. For update information, contact Emerson Security https://www.emerson.com/en-us/support/security-notifications web page.

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2023-46687?
CVE-2023-46687 is rated as critical because it allows unauthenticated remote command execution on affected Emerson products.
How do I fix CVE-2023-46687?
To mitigate CVE-2023-46687, users should update the affected Emerson Rosemount GC370XA, GC700XA, and GC1500XA products to the latest firmware version.
What products are affected by CVE-2023-46687?
CVE-2023-46687 affects Emerson Rosemount GC370XA, GC700XA, and GC1500XA products running firmware version 4.1.5.
Can CVE-2023-46687 be exploited remotely?
Yes, CVE-2023-46687 can be exploited remotely by an unauthenticated user with network access.
What type of vulnerability is CVE-2023-46687?
CVE-2023-46687 is a remote command execution vulnerability that can lead to unauthorized access and control over the affected devices.

agent/weakness
agent/remedy
agent/title
agent/references
agent/type
agent/first-publish-date
agent/description
agent/severity
agent/author
agent/event
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/source
agent/tags
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/software-canonical-lookup-request
vendor/emerson
canonical/emerson gc370xa firmware
version/emerson gc370xa firmware/4.1.5
canonical/emerson gc370xa
canonical/emerson gc700xa
version/emerson gc700xa/4.1.5
canonical/emerson gc1500xa firmware
version/emerson gc1500xa firmware/4.1.5
canonical/emerson gc1500xa

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.