high7.5
CVE-2019-13524
GE PACSystems RX3i CPE100/115: All versions prior to R9.85,CPE302/305/310/330/400/410: All versions prior to R9.90,CRU/320 All versions(End of Life) may allow …
Impact
GE PACSystems RX3i CPE100/115: All versions prior to R9.85,CPE302/305/310/330/400/410: All versions prior to R9.90,CRU/320 All versions(End of Life) may allow an attacker sending specially manipulated packets to cause the module state to change to halt-mode, resulting in a denial-of-service condition. An operator must reboot the CPU module after removing battery or energy pack to recover from halt-mode.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Emerson | Rx3i Cpe100 Firmware | before r9.85 |
| Emerson | Rx3i Cpe115 Firmware | before r9.85 |
| Emerson | Rx3i Cpe302 Firmware | before r9.90 |
| Emerson | Rx3i Cpe305 Firmware | before r9.90 |
| Emerson | Rx3i Cpe310 Firmware | before r9.90 |
| Emerson | Rx3i Cru320 Firmware | All versions |
| Emerson | Rx3i Cpe330 Firmware | before r9.90 |
| Emerson | Rx3i Cpe400 Firmware | before r9.90 |
| Emerson | Rx3i Cpl410 Firmware | before r9.90 |