Vulnerability Description
A Heap-based Buffer Overflow was found in Emerson OpenEnterprise SCADA Server 2.83 (if Modbus or ROC Interfaces have been installed and are in use) and all versions of OpenEnterprise 3.1 through 3.3.3, where a specially crafted script could execute code on the OpenEnterprise Server.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Emerson | Openenterprise Scada Server | >= 3.1, <= 3.3.3 |
Related Weaknesses (CWE)
References
- https://www.us-cert.gov/ics/advisories/icsa-20-049-02Third Party AdvisoryUS Government Resource
- https://www.us-cert.gov/ics/advisories/icsa-20-049-02Third Party AdvisoryUS Government Resource
FAQ
What is CVE-2020-6970?
CVE-2020-6970 is a vulnerability with a CVSS score of 9.8 (CRITICAL). A Heap-based Buffer Overflow was found in Emerson OpenEnterprise SCADA Server 2.83 (if Modbus or ROC Interfaces have been installed and are in use) and all versions of OpenEnterprise 3.1 through 3.3.3...
How severe is CVE-2020-6970?
CVE-2020-6970 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2020-6970?
Check the references section above for vendor advisories and patch information. Affected products include: Emerson Openenterprise Scada Server.