RCE in Emerson Dl 8000 Remote Terminal Unit

CVE-2013-2810

Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to execute arbitrary commands via a TCP replay attack.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.060 (92.5th percentile) — read the EPSS interpretation.

Affected products

Emerson Dl_8000_remote_terminal_unit
Emerson Dl_8000_remote_terminal_unit_firmware — versions 2.30
Emerson Roc_800l_remote_terminal_unit
Emerson Roc_800l_remote_terminal_unit_firmware
Emerson Roc_800_remote_terminal_unit
Emerson Roc_800_remote_terminal_unit_firmware
N/a — versions n/a

Weakness classification (CWE)

CWE-77 — Command Injection

References

ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)
ics-cert@hq.dhs.gov (vdb-entry, x_refsource_BID)
ics-cert@hq.dhs.gov (vdb-entry, x_refsource_XF)