CVE-2016-9347

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2016-9347
An issue was discovered in Emerson SE4801T0X Redundant Wireless I/O Card V13.3, and SE4801T1X Simplex Wireless I/O Card V13.3. DeltaV Wireless I/O Cards (WIOC) running the firmware available in the DeltaV system, release v13.3, have the SSH (Secure Shell) functionality enabled unnecessarily.

5.0 /10

CVSS v3 : MEDIUM

V3 Legend

Vector : AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Exploitability : 1.6 / Impact : 3.4

Attack Vector ADJACENT_NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

5.4 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:A/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 5.5 / Impact : 6.4

Access Vector ADJACENT_NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://www.securityfocus.com/bid/94586 Third Party Advisory VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-16-334-03 Third Party Advisory US Government Resource
http://www.securityfocus.com/bid/94586 Third Party Advisory VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-16-334-03 Third Party Advisory US Government Resource
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:emerson:se4801t0x_redundant_wireless_i\/o_card_firmware:13.3:*:*:*:*:*:*:*
cpe:2.3:h:emerson:se4801t0x_redundant_wireless_i\/o_card:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:emerson:se4801t1x_simplex_wireless_i\/o_card_firmware:13.3:*:*:*:*:*:*:*
cpe:2.3:h:emerson:se4801t1x_simplex_wireless_i\/o_card:-:*:*:*:*:*:*:*
History

21 Nov 2024, 03:00

Type Values Removed Values Added
References () http://www.securityfocus.com/bid/94586 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/94586 - Third Party Advisory, VDB Entry
References () https://ics-cert.us-cert.gov/advisories/ICSA-16-334-03 - Third Party Advisory, US Government Resource () https://ics-cert.us-cert.gov/advisories/ICSA-16-334-03 - Third Party Advisory, US Government Resource
Information

Published : 2017-02-13 21:59

Updated : 2024-11-21 03:00

NVD link : CVE-2016-9347

Mitre link : CVE-2016-9347

CVE.ORG link : CVE-2016-9347

JSON object : View

Products Affected

emerson

  • se4801t1x_simplex_wireless_i\/o_card
  • se4801t0x_redundant_wireless_i\/o_card_firmware
  • se4801t0x_redundant_wireless_i\/o_card
  • se4801t1x_simplex_wireless_i\/o_card_firmware
CWE
CWE-254

7PK - Security Features