Lucene search
IcscertCVE-2023-1935HistoryAug 02, 2023 - 11:15 p.m.
CVE-2023-1935
2023-08-0223:15:10
CWE-287
icscert
web.nvd.nist.gov
27
nvd
cve-2023-1935
roc800-series
rtu
device
vulnerability
authentication bypass
unauthorized access
data
control
denial-of-service
CVSS3
9.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
AI Score
9.4
Confidence
High
EPSS
0.001
Percentile
34.9%
ROC800-Series RTU devices are vulnerable to an authentication bypass, which could allow an attacker to gain unauthorized access to data or control of the device and cause a denial-of-service condition.
Affected configurations
Node
emersonroc809_firmware
emersonroc809
Node
emersonroc827_firmware
emersonroc827
Node
emersonroc809l_firmware
emersonroc809lMatch-
Node
emersonroc827l_firmware
emersonroc827lMatch-
Node
emersondl8000_firmware
emersondl8000
| Vendor | Product | Version | CPE |
|---|---|---|---|
| emerson | roc809_firmware | * | cpe:2.3:o:emerson:roc809_firmware:*:*:*:*:*:*:*:* |
| emerson | roc809 | * | cpe:2.3:h:emerson:roc809:*:*:*:*:*:*:*:* |
| emerson | roc827_firmware | * | cpe:2.3:o:emerson:roc827_firmware:*:*:*:*:*:*:*:* |
| emerson | roc827 | * | cpe:2.3:h:emerson:roc827:*:*:*:*:*:*:*:* |
| emerson | roc809l_firmware | * | cpe:2.3:o:emerson:roc809l_firmware:*:*:*:*:*:*:*:* |
| emerson | roc809l | - | cpe:2.3:h:emerson:roc809l:-:*:*:*:*:*:*:* |
| emerson | roc827l_firmware | * | cpe:2.3:o:emerson:roc827l_firmware:*:*:*:*:*:*:*:* |
| emerson | roc827l | - | cpe:2.3:h:emerson:roc827l:-:*:*:*:*:*:*:* |
| emerson | dl8000_firmware | * | cpe:2.3:o:emerson:dl8000_firmware:*:*:*:*:*:*:*:* |
| emerson | dl8000 | * | cpe:2.3:h:emerson:dl8000:*:*:*:*:*:*:*:* |
CNA Affected
[
{
"vendor": "Emerson Electric",
"product": "DL8000",
"versions": [
{
"status": "affected",
"version": "All"
}
]
},
{
"vendor": "Emerson Electric",
"product": "ROC827",
"versions": [
{
"status": "affected",
"version": "All"
}
]
},
{
"vendor": "Emerson Electric",
"product": "ROC809L",
"versions": [
{
"status": "affected",
"version": "All"
}
]
},
{
"vendor": "Emerson Electric",
"product": "ROC827",
"versions": [
{
"status": "affected",
"version": "All"
}
]
},
{
"vendor": "Emerson Electric",
"product": "ROC809",
"versions": [
{
"status": "affected",
"version": "All"
}
]
}
]Related
prion
prion
Authentication flaw
2023-08-02 23:15:00
cvelist
cvelist
CVE-2023-1935 CVE-2023-1935
2023-08-02 22:40:46
ics
ics
Emerson ROC800 Series RTU and DL8000 Preset Controller
2023-07-25 12:00:00
nvd
nvd
CVE-2023-1935
2023-08-02 23:15:10
CVSS3
9.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
AI Score
9.4
Confidence
High
EPSS
0.001
Percentile
34.9%
Related for CVE-2023-1935