Vendor
Emerson
33 known vulnerabilities.
Products
12 results · Clear filters · Feed
-
High 7.5
Emerson Ovation Insufficient Verification of Data Authenticity
Emerson Ovation was found to have no authentication of firmware signing and relies on an insecure checksum for integrity. This could allow an attacker to push malicious firmware images, cause a denial-of-service condition, or achieve remote code execution.
-
High 8.4
Emerson PAC Machine Edition 9.80 Build 8695 - 'TrapiServer' Unquoted Service Path
Emerson PAC Machine Edition 9.80 contains an unquoted service path vulnerability in the TrapiServer service that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in the service configuration to i…
-
High 7.7
Emerson ValveLink Products Protection Mechanism Failure
Emerson ValveLink products do not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.
-
High 7.7
Emerson ValveLink Products Cleartext Storage of Sensitive Information in Memory
Emerson ValveLink Products store sensitive information in cleartext within a resource that might be accessible to another control sphere.
-
High 8.3
Emerson Rosemount GC370XA, GC700XA, GC1500XA Improper Authentication
In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could bypass authentication and acquire admin capabilities.
-
High 8.8
ICSA-20-140-02 Emerson OpenEnterprise
Inadequate folder security permissions in Emerson OpenEnterprise versions through 3.3.4 may allow modification of important configuration files, which could cause the system to fail or behave in an unpredictable manner.
-
High 8.0
Emerson WirelessHART Gateway
The affected product is vulnerable to improper input validation in the restore file. This enables an attacker to provide malicious config files to replace any file on disk.
-
High 8.0
Emerson WirelessHART Gateway
The affected product is vulnerable to directory traversal due to mishandling of provided backup folder structure.
-
High 8.0
Emerson WirelessHART Gateway
The affected product is vulnerable to a unsanitized extract folder for system configuration. A low-privileged user can leverage this logic to overwrite the settings and other key functionality.
-
High 8.0
Emerson WirelessHART Gateway
The affected product is vulnerable to a disclosure of peer username and password by allowing all users access to read global variables.
-
High 8.0
Emerson WirelessHART Gateway
The affected product is vulnerable to a missing permission validation on system backup restore, which could lead to account take over and unapproved settings change.
-
High 8.0
Emerson WirelessHART Gateway
The affected product is vulnerable to a parameter injection via passphrase, which enables the attacker to supply uncontrolled input.