Vulnerability CVE-2013-0693
Published: 2013-10-03

Description:
The kernel in ENEA OSE on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier performs network-beacon broadcasts, which allows remote attackers to obtain potentially sensitive information about device presence by listening for broadcast traffic.

Type:

CWE-200

 (Information Exposure)

CVSS2 => (AV:N/AC:L/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
10/10
10/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
ENEA -> OSE 
Emerson -> Dl 8000 remote terminal unit 
Emerson -> Roc 800 remote terminal unit 
Emerson -> Roc 800l remote terminal unit 

 References:
http://ics-cert.us-cert.gov/advisories/ICSA-13-259-01
Copyright 2024, cxsecurity.com

 

Back to Top