by Kastro
Paper/Archive/CVE-2020-6970

CVE-2020-6970

Emerson OpenEnterprise SCADA Server — A Heap-based Buffer Overflow was found in Emerson OpenEnterprise SCADA Server 2.83 (if Modbus or ROC Interfaces have been installed and a…

EPSS 3%CVSS 9.8
critical.is priorityof 100
46
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 85.2.852 × 2017.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A Heap-based Buffer Overflow was found in Emerson OpenEnterprise SCADA Server 2.83 (if Modbus or ROC Interfaces have been installed and are in use) and all versions of OpenEnterprise 3.1 through 3.3.3, where a specially crafted script could execute code on the OpenEnterprise Server.

Affected

ProductAffectedFixed inSource
OpenEnterprise SCADA Server2.83 (if Modbus or ROC Interfaces have been installed and are in use)–CNA
OpenEnterprise3.1 through 3.3.3–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refus-cert.gov/ics/advisories/icsa-20-049-02