CVE-2020-16235
Published May 19, 2022Inadequate encryption may allow the credentials used by Emerson OpenEnterprise, up through version 3.3.5, to access field devices and external systems to be obtained.
Vendor/product archive
emerson / openenterprise_scada_server CVEs
Beta · best-effort5 CVEs tagged to emerson / openenterprise_scada_server — 2 Critical, 1 High, 1 Medium, 1 Low, 0 Unrated.
CVE-2020-10640
Published Feb 24, 2022Emerson OpenEnterprise versions through 3.3.4 may allow an attacker to run an arbitrary commands with system privileges or perform remote code execution via a specific communicati…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2020-10636
Published Feb 24, 2022Inadequate encryption may allow the passwords for Emerson OpenEnterprise versions through 3.3.4 user accounts to be obtained.
CVE-2020-10632
Published Feb 24, 2022Inadequate folder security permissions in Emerson OpenEnterprise versions through 3.3.4 may allow modification of important configuration files, which could cause the system to fa…
CVE-2020-6970
Published Feb 19, 2020A Heap-based Buffer Overflow was found in Emerson OpenEnterprise SCADA Server 2.83 (if Modbus or ROC Interfaces have been installed and are in use) and all versions of OpenEnterpr…
- evidence mentions
- 1
- Buzz score
- 11.9
Showing 1-5 of 5 CVEsPage 1 of 1