Description
Inadequate encryption may allow the credentials used by Emerson OpenEnterprise, up through version 3.3.5, to access field devices and external systems to be obtained.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Emerson | Open Enterprise | All – ≤ 3.3.5 | — |
Advisories 1
- ICSA-20-238-02 Emerson OpenEnterprise CISA ICS & IT advisories · Aug 25, 2020