1. Home
  2. CVE Database
  3. CVE-2023-1935
CRITICAL · 9.4

CVE-2023-1935

ROC800-Series RTU devices are vulnerable to an authentication bypass, which could allow an attacker to gain unauthorized access to data or control of the device and cause a denial-of-service condition...

Vulnerability Description

ROC800-Series RTU devices are vulnerable to an authentication bypass, which could allow an attacker to gain unauthorized access to data or control of the device and cause a denial-of-service condition.

CVSS Score

9.4

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
EmersonRoc809 FirmwareAll versions
EmersonRoc809All versions
EmersonRoc827 FirmwareAll versions
EmersonRoc827All versions
EmersonRoc809L FirmwareAll versions
EmersonRoc809L-
EmersonRoc827L FirmwareAll versions
EmersonRoc827L-
EmersonDl8000 FirmwareAll versions
EmersonDl8000All versions

Related Weaknesses (CWE)

CWE-287

References

FAQ

What is CVE-2023-1935?

CVE-2023-1935 is a vulnerability with a CVSS score of 9.4 (CRITICAL). ROC800-Series RTU devices are vulnerable to an authentication bypass, which could allow an attacker to gain unauthorized access to data or control of the device and cause a denial-of-service condition...

How severe is CVE-2023-1935?

CVE-2023-1935 has been rated CRITICAL with a CVSS base score of 9.4/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2023-1935?

Check the references section above for vendor advisories and patch information. Affected products include: Emerson Roc809 Firmware, Emerson Roc809, Emerson Roc827 Firmware, Emerson Roc827, Emerson Roc809L Firmware.