critical9.8
CVE-2023-46687
In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could execute arbitrary commands in root context from…
Impact
In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could execute arbitrary commands in root context from a remote computer.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Emerson | Gc370xa Firmware | Version 4.1.5 |
| Emerson | Gc700xa Firmware | Version 4.1.5 |
| Emerson | Gc1500xa Firmware | Version 4.1.5 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-030-01
- https://www.emerson.com/documents/automation/security-notification-emerson-gas-chromatographs-cyber-security-notification-icsa-24-030-01-en-10103910.pdf
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-030-01
- https://www.emerson.com/documents/automation/security-notification-emerson-gas-chromatographs-cyber-security-notification-icsa-24-030-01-en-10103910.pdf