Lucene search
IcscertCVELIST:CVE-2020-10640HistoryFeb 24, 2022 - 6:50 p.m.
CVE-2020-10640 ICSA-20-140-02 Emerson OpenEnterprise
2022-02-2418:50:15
CWE-306
icscert
www.cve.org
2
emerson openenterprise
vulnerability
3.3.4
system privileges
remote code execution
communication service
CVSS3
10
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AI Score
9.8
Confidence
High
EPSS
0.004
Percentile
72.3%
Emerson OpenEnterprise versions through 3.3.4 may allow an attacker to run an arbitrary commands with system privileges or perform remote code execution via a specific communication service.
CNA Affected
[
{
"product": "OpenEnterprise SCADA Software",
"vendor": "Emerson",
"versions": [
{
"lessThanOrEqual": "3.3.4",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2020-10640
2022-02-24 19:15:08
cve
cve
CVE-2020-10640
2022-02-24 19:15:08
prion
prion
Remote code execution
2022-02-24 19:15:00
ics
ics
Emerson OpenEnterprise
2020-05-20 12:00:00
CVSS3
10
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AI Score
9.8
Confidence
High
EPSS
0.004
Percentile
72.3%
Related for CVELIST:CVE-2020-10640