Summary
Successful exploitation of this vulnerability could allow an attacker access to credentials held by OpenEnterprise used for accessing field devices and external systems.
Vulnerabilities 1
-
Low 3.8
Emerson OpenEnterprise - Inadequate Encryption Strength
Inadequate encryption may allow the credentials used by Emerson OpenEnterprise, up through version 3.3.5, to access field devices and external systems to be obtained.
Revision history
-
#1
ICSA-20-238-02 Emerson OpenEnterprise
References
-
ICS Advisory ICSA-20-238-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-20-238-02
-
Recommended Practices
https://www.us-cert.gov/ncas/tips/ST04-014
-
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B