Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-46687 EUVD-2023-50875GHSA-wh3x-5m3c-43h7

Emerson Rosemount GC370XA, GC700XA, GC1500XA Command Injection

Published Feb 9, 2024 · Updated Jun 17, 2025 · Assigned by icscert

Description

In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could execute arbitrary commands in root context from a remote computer.

Affected products

VendorProductAffectedFixed
Emerson Rosemount GC370XA ≤ Version 4.1.5 —
Emerson Rosemount GC700XA ≤ Version 4.1.5 —
Emerson Rosemount GC1500XA ≤ Version 4.1.5 —

Advisories 1

References