Multiple Emerson Process Management RTUs CVE-2013-2810 Security Bypass Vulnerability

Bugtraq ID:	71425
Class:	Design Error
CVE:	CVE-2013-2810
Remote:	Yes
Local:	No
Published:	Dec 03 2014 12:00AM
Updated:	Dec 24 2014 12:55AM
Credit:	Dillon Beresford, Brian Meixell, Marc Ayala and Eric Forner of Cimation
Vulnerable:
Not Vulnerable:

Multiple Emerson Process Management RTUs CVE-2013-2810 Security Bypass Vulnerability

Multiple Emerson Process Management RTUs including ROC800, DL8000, and ROC800L are prone to a security-bypass vulnerability.

Successful exploits may allow attackers to bypass authentication and perform unauthorized actions.

The following versions are affected:

ROC800 3.50 and prior
DL8000 2.30 and prior
ROC800L 1.20 and prior

Multiple Emerson Process Management RTUs CVE-2013-2810 Security Bypass Vulnerability

Attackers can exploit this issue using readily available tools.

Multiple Emerson Process Management RTUs CVE-2013-2810 Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple Emerson Process Management RTUs CVE-2013-2810 Security Bypass Vulnerability

References:

• Emerson Electric Co Homepage (Emerson Electric Co)