HIGH · 10.0

CVE-2013-2810

Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to execute arbit...

Vulnerability Description

Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to execute arbitrary commands via a TCP replay attack.

CVSS Score

10.0

HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE

Affected Products

VendorProductVersions
EmersonDl 8000 Remote Terminal Unit Firmware2.30
EmersonDl 8000 Remote Terminal Unit-
EmersonRoc 800L Remote Terminal Unit Firmware<= 1.20
EmersonRoc 800L Remote Terminal Unit-
EmersonRoc 800 Remote Terminal Unit Firmware<= 3.50
EmersonRoc 800 Remote Terminal Unit-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2013-2810?

CVE-2013-2810 is a vulnerability with a CVSS score of 10.0 (HIGH). Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to execute arbit...

How severe is CVE-2013-2810?

CVE-2013-2810 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2013-2810?

Check the references section above for vendor advisories and patch information. Affected products include: Emerson Dl 8000 Remote Terminal Unit Firmware, Emerson Dl 8000 Remote Terminal Unit, Emerson Roc 800L Remote Terminal Unit Firmware, Emerson Roc 800L Remote Terminal Unit, Emerson Roc 800 Remote Terminal Unit Firmware.