The TFTP server on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to upload files and consequently execute arbitrary code via unspecified vectors.
References
Link | Resource |
---|---|
http://ics-cert.us-cert.gov/advisories/ICSA-13-259-01 | US Government Resource |
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
Configuration 3 (hide)
AND |
|
History
No history.
Information
Published : 2013-10-03 11:04
Updated : 2024-02-04 18:16
NVD link : CVE-2013-0689
Mitre link : CVE-2013-0689
CVE.ORG link : CVE-2013-0689
JSON object : View
Products Affected
emerson
- roc_800_remote_terminal_unit
- dl_8000_remote_terminal_unit
- roc_800l_remote_terminal_unit
enea
- ose
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')