Description
Emerson OpenEnterprise versions through 3.3.4 may allow an attacker to run an arbitrary commands with system privileges or perform remote code execution via a specific communication service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Emerson | OpenEnterprise SCADA Software | unspecified – ≤ 3.3.4 | — |
Advisories 1
- ICSA-20-140-02 Emerson OpenEnterprise CISA ICS & IT advisories · May 19, 2020